last executing test programs:

1.067918853s ago: executing program 1 (id=1846):
r0 = socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0)

1.011737403s ago: executing program 1 (id=1847):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}], {0x14}}, 0x68}}, 0x600c0)

1.011444183s ago: executing program 1 (id=1848):
move_pages(0x0, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0)

962.278266ms ago: executing program 1 (id=1849):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)

962.059361ms ago: executing program 1 (id=1850):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x2c}}, 0x0)

891.746561ms ago: executing program 1 (id=1851):
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x3000, 0x440100, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b)
ioctl$sock_inet_SIOCSARP(r2, 0xc0046686, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @random="89a08d8ed953"}, 0x8, {0x2, 0x4e20, @private=0xa010101}, 'tunl0\x00'})

724.175842ms ago: executing program 2 (id=1852):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18f40000170000100800000000009500"/32], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x2, 0x81, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff})
fdatasync(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x100004, 0x4, {0x0, 0x2710}, {0x0, 0xc, 0xf8, 0x7, 0x6, 0x0, "3b051c46"}, 0x10000, 0x2, {0x0}, 0x1})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0})
mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x0010'])
r4 = socket(0x10, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

629.05616ms ago: executing program 2 (id=1853):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000000), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)

487.288244ms ago: executing program 0 (id=1858):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', <r2=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001)

431.39535ms ago: executing program 0 (id=1859):
epoll_create(0x80000000)

431.227069ms ago: executing program 0 (id=1860):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080))

377.029016ms ago: executing program 0 (id=1861):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0)

376.660702ms ago: executing program 0 (id=1862):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000bc0)={[{@grpquota}, {@delalloc}, {@resuid}, {@test_dummy_encryption}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e8, &(0x7f0000000f40)="$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")

210.716862ms ago: executing program 2 (id=1863):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000840)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x16000000, &(0x7f0000000940)="e3"})

210.324169ms ago: executing program 0 (id=1864):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x6260, &(0x7f0000000740)="$eJzs3c9vHGf9B/DP/vSPfJtaPVT9Rgi5aflRSpM4KSFQoO0BDlx6QLmiRK5bRaSAkoDSyiKufOHAib8AhMQRIY6IQ/+AHrhy48SJSDYSqCcGjfd54tnNbteu45215/WS7JnPPDP2M37v7A/vzD4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3v/eDtVZE3Ph5WrAS8X/RiWhHLJX1akQsra7k9bsR8VzsNcezEdFbiCi33/v2dMSrEfHx2Yid3c31cvHlA/bju3/82+9+eOatv/6hd/E/f7rXeW3Sevfv/+rff35wtH0GAACApimKomill/nn0uv7dt2dAgBmIj/+F0lefurrX//jrb/MU3/UarVarZ5BXVWM96BaRMRWdZvyOYO34wHghNmKT+ruAjWSf6N1I+JM3Z0A5lqr7g5wLHZ2N9dbKd9W9fFgddCezwUZyn+r9ej6jknTaUbPMZnV7Ws7OvHMhP4szagP8yTn3x7N/8agvZ/WO+78Z2VS/v3BpU+Nk/PvjOY/4vTk3x6bf1Pl/LuHyr8jfwAAAAAAmGP5//8rNb//u3D0XTmQT3v/d3VGfQAAAAAAAACAJ+2o4/89Yvw/AAAAmFvla/XSb87uL5v0WWzl8uutiKdG1gca5qPBZLnufgAAAAAAAAAAAABAk3QH5/Beb0X0IuKp5eWiKMqvqtH6sI66/UnX9P2HJqv7Th4AAAY+PjtyLX8rYjEirkd777P+esvLy0WxuLRcLBdLC/n5bH9hsViqvK7N03LZQv8AT4i7/aL8YYuV7aqmvV6e1j7688rf1S86B+jYE9JLf80JzTWFDQDJ4NFoxyPSKVMUT0968gFDHP+n0Eqs1H27Yv7VfTMFAAAAjl9RFEUrDfN3Lo3v1667UwDATOTH/9H3BQ5UR4xvbx9yfbVarVar1TOpq4rxHlSLiNiqblM+ZzAcPwCcMFvxSd1doEbyb7RuRDxXdyeAudaquwMci53dzfVWyrdVfTxYHbTnc0GG8t9q7W2Xtx83nWb0HJNZ3b62oxPPTOjPszPqwzzJ+bdH878xaO+n9Y47/1mZlH9/75K55sn5d0bzH3F68m+Pzb+pcv7dQ+XfkT8AAAAAAMyx/P//Fe//5l0GAAAAAAAAgBNnZ3dzPV/3mt///9yY9Vz/eTrl/FuHzX8pzcv/RMv5t0fy//LIep3K/MM394//f+1urv/+3j//P08Pmv9CnmmlW1Yr3SJa6Te1uml6lL173Hav0y9/U6/V7nTTOT9F7524FbdjIy4NrdtOf4/99rWh9rKnvaH2y0Pt3cfarwy199LnDhRLuf1CrMdP4na8vddeti1M2f/FKe3FlPacf8f9fyPl/LuVrzL/5dTeGpmWHn7Yfuy4r07H/Z43bn3+l5eOf3em2o7Oo32rKvfvfA392fubnOnHz+5u3Llw/+a9e3fWIk2Gll6ONHnCcv69va+F/fv/Fwbt+X6/erw+/LB/6PznxXZ0J+b/QmW+3N+XZty3OuT8++kr5/92ah9//J/k/Ccf/y/X0B8AAAAAAAAAAAAAAAD4NEVR7F0i+kZEXE3X/9R1bSYAMFv58b9I8nK1Wq1Wz0sdK3vf56Y/6pNcVxXjvV4tIuKj6jblc4ZfjPthAMA8+29E/L3uTlAb+TdY/ry/cvpi3Z0BZuru+x/86Obt2xt37tbdEwAAAAAAAADgs8rjf65Wxn9+MSJWRtYbGv/1zVg96vif3TzzaIDRJzzQ9wTb7X6nXRlu/PnYG5/7wqTxv8/H4+N/5zFxO9X9mKA3pb0/pX1hSvvi2KX7aY290KMi5/98ZbzzMv9zI8OvN2H819Ex75sg53++cnsu8//SyHrV/Ivfzl3+WwddcTvaQ/lfvPfeTy/eff+DV269d/PdjXc3fnxlbe3SlatXr127dvGdW7c3Lg2+H0+v50DOP4997TzQZsn558zl3yw5/y+kWv7NkvP/Yqrl3yw5//x8T/7NkvPPr33k3yw5/5dSLf9myfl/JdXyb5ad3c2FMv+XUy3/ZsnH/1dTLf9myfm/kmr5N0vO/0Kq5d8sOf+LqT5A/j4e/hTJ+ed3uBz/zZLzX0v1lPyXZtUvZiPnfznVjv9myflfSbX8myXn/2qq5d8sOf+vpVr+zZLzv5pq+TdLzv/rqZZ/s+T8r6Va/s2S8/9GquXfLDn/b6Za/s2S838t1fJvlpz/t1It/2bJ+X871fJvlpz/d1It/2bJ+b+eavk3y/7n/5sxY+aUzfTjM29e9z0TAAAAAAAAAAAAADBqFich172PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO8g7gZ/bmtUOwgRCc1MDaMcY4S3Z9iS+0LiYQLgFKgYRCL9iud20WfMNrl0CRbBookTAqqqiafmgLKGojVRVWxQdapTQfql4+kfYD/VJRVUJqVJkooCK1Fc1WM+d9X8/Mzs6MveP12XN+Pyl5dmfOmfPOmfecnWfX/zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTa/dfaLtSzL6v81/rchy15S/3rtxIbGbW+61SMEAAAAluv/Gv9/YX264VAfKzUt8/ev+e63FhYWFrIPD//e6FcXFtIdE1k2uibLGvdFV/79I7XmZYLHsvHaUNP3Qz02P9zj/pEe94/2uH+sx/1retw/3uP+RTtgkbX572MaD7a18eWGfJdmd2Sjjfu2dljrsdqaoaH4u5yGWmOdhdHj2Vx2MpvNpluWz5etNZZ/enN9W+/M4raGmra1qT5DfvTZY3EMtbCPt7Zs69pjRj98Szbx4x999tifnL96V6facze0PF4+zu1b6uP8fLglH2stW5P2SRznUNM4N3V4TYZbxllrrFf/un2cL/Q5zuFrw1xR7a/5eDbU+PrZxn4aaf61XtpPm8Jt/31PlmWXrg27fZlF28qGsnUttwxde33G8xlZf4z6VHp5NnJd83RzH/O0Xme2ts7T9mMivv6bw3ojS4yh+WX64efGFr3u1ztPo/qzXupYaZ+Dgz5WijIH47x4tvGkH+84B7eG5//ZbUvPwY5zp8McTM+7aQ5u6TUHh8aGG2NOL0Ktsc61ObizZfnhxpZqjfrctu5zcOr8qbNT85/+zBvnTh09MXti9vTunTund+/du3///qnjcydnp/P/3+DeLr512VA6BraEfRePgde3Lds8VRe+PrjjcLzLcbihbdlBH4cj7U+utjIH5OI5nR8bD9d3+vjloWyJY6zx+uxY/nGYnnfTcTjSdBx2/JnS4Tgc6eM4rC9zdkd/71lGmv7rNIab9bNgQ9McbH8/0j4HB/1+pChzcDzMi3/dsfTPgk1hvI9PXu/7keFFczA93XDuqd+S3u+P72+UTvPy7vodt41lF+Znz9336NHz58/tzEJZEa9omivt83Vd03PKFs3Xoeuer4fmXvP43R1u3xD21fgb6/8bX/K1qi+z577ur1Xjp1vn/dly664slAFb6f3Z6ad5fX+mXrLL/qwv8/mp5b8XT31p0/l3dInzb+z7X8y3lx7qseHRkfz4HU57Z7TlfNz6Uo00zl21xrZfmOrvfDwa/lvp8/EdXc7HG9uWHfT5eLT9ycXzca3XbzuWp/31HA/z5OR09/NxfZmNu653To50PR/fE2ot7P83hE4h9UVNc2epeZu2NTIyGp7XSNxC6zzd3bL8aOjN6tt6ateNzdPt9+SPNZye3TUrNU8n2pYd9DxN56ul5mmt12/fbkz76zke5sUdu7vP0/oyz+xZ/rlzbfyy6dw51msOjg6P1cc8miZhfr5fWBvn4H3ZsexMdjKbadw71phPtca2Ju/vbw6Ohf9W+ly5scsc3N627KDnYPo5ttTcq40sfvID0P56jod58cT93edgfZm37Rvse9ft4Za0TNN71/bfry31O6+723bTzfydV32cf7uv++9m68uc3H+9fWb3/XRvuOW2Dvup/fhd6piayVZmP20M47y6f+n9VB9PfZmvHuhzPh3KsuziJx9o/L43/H3lLy5871stf3fp9Dedi5984Pnbj//d9YwfgNXvxbysy3/WNf1lqp+//wMAAACrQuz7h0JN9P8AAABQGrHvj/8qPNH/AwAAQGnEvn8k1KQi/f/Gt12de/FilpL5C0G8P+2Gh/LlYsZ1Onw/sXBN/fYHnpz9yV9d7G/bQ1mW/fSh3+y4/MaH4rhyE2GcVx5svX3xihf72v6RR64t15xf/1p4/Ph8+p0GnSK401mWPb3+y43tTHzkcqM+89CRRv3Apccfqy/zwoH8+7j+c6/Il//DEP49dPxoy/rPhf3wg1Cn3915f8T1vnn5DZv2feja9uJ6tS0vbTztJz6aP278nJyvPJYvH/fzUuP/6y899c368o++rvP4Lw51Hv9T4XGffPDqXH3G/c+r8+WbX4P693G9L4Txx+09Gda/7xvf6Tj+K1/Mlz/79ny5I6HG7W8P3299+9W55v31aO1oy/PK3pEvF7c//b3fadwfHy8+fvv4xw9fbtkf7fPjmX/OH2eqbfl4e9xO9Jdt268/TvP8jNt/6rePtOznXtu/8oHnXl1/3Pbt39u23HDb+u2f2PRHX/hyx+3F8Rz687Mtz+fQ+8NxHLb/xEfDfAz3/++VL7dsNzry/tbzT1z+axsutjyf6J0/zrd/5c0nGvU/Jn7yB7e95PaXXnptfd9l2bMfzB+v1/ZP/PGZlvF//c4djdcj3h8z+u3bX0rc/rlPTZ4+M39hbqZprzY+O+c9+XjWjK9dVx/v+nBubf/+8JnzH5s9NzE9MZ1lE+X9CL0b9o1Qn8/Lpetdf8cj4fW8+/efXrftn74Ub/+Xh/PbL787/7n1+rDcV8LtG/LXb6G2zO0/sfnOxvFdeyb/viXHPgCbtv7n/r4WDM+//X1BnO9nX/mxxn6o39f4uRGP62WO//sz+eN8O+zXhfDJzFvuvLa95uXjZyNc/mB+vC97/4XTXHxd/zS83u/9Qf74cVzx+X4/vI/5zsbW812cH9++ONT++I1P8bgUzifZpfz+uFTc35dfuLPj8OLnkGSX7mp8/7vpce66rqe5lPlPz0+dnDt94dGp87Pz56fmP/2Zw6fOXDh9/nDjszwPf7zX+tfOT+sa56eZ2b17sum1WZadyaZX4IR1c8Zf/6q/8Z995NjMvultM7PHj144fv6Rs7PnThybnz82OzO/7ejx47Of6rX+3MzBnbsO7N63a/LE3MzB/QcO7D4wOXf6TH0Y+aB62Dv9icnT5w43Vpk/uOfAzvvv3zM9eerMzOzBfdPTkxd6rd/42TRZX/s3Js/Nnjx6fu7U7OT83GdmD+48sHfvrp6fBnjq7PH5ialzF05PXZifPTeVP5eJ842b6z/7eq1POc3/W/5+tl0t/yC+7H337k2fz1r35OeWfKh8kbYPEL0aPovmH192dn8/38e+fzTUpCL9PwAAAFRB7PvHQk30/wAAAFAase9fE2qi/wcAAIDSiH3/eKhJRfp/+X/5//7y//n9g8z/d8rPZ33l/0fl/1co/3/2k3mudLXn/2N+Xv6/Gm5x/n/Z25f/l/8vX/6///z8ah+//L/8P4sVLf8f+/61WVbJ/h8AAACqIPb960JN9P8AAABQGrHvvy3URP8PAAAApRH7/peEmlSk/5f/7yv/v6tX4Kr8+f/BX///xvP/rv8v/5/rK/8fXxz5/8q47vz9hx5u+Vb+P5D/l/+X/5f/l/9n2UaXvOdW5f9j3397qElF+n8AAACogtj3vzTURP8PAAAApRH7/vWhJvp/AAAAKI3Y928INalI/y//7/r/8v/y/6XO/y/3+v9Ng5H/Xx1c/787+f8ebjj/Pz64/P/6pYcn/z/g8Y8OdvzFzv/3HL78PzdF0a7/H/v+l4WaVKT/BwAAgCqIff/LQ030/wAAAFAase9/RaiJ/h8AAABKI/b9d4SaVKT/X07+P2au5f/l/+X/c/L/uVLl/7te/z//Sv6/WOT/uyt//j9/P+P6/zemcvn/AY+/2Pn/QV//f/TB9vXl/+mkaPn/2Pe/MtSkIv0/AAAAVEHs++8MNdH/AwAAQGnEvv9VoSb6fwAAACiN2PdvDDWpSP/v+v/y//L/8v/y/5233zv/n5P/Lxb5/+7Kn/+/Vdf/l//P5P+rlf/v8OZX/p9Oipb/j33/XaEmFen/AQAAoApi3393qIn+HwAAAEoj9v0/E2qi/wcAAIDSiH3/plCTivT/8v/y//L/1cr/3zsm/y//X27y/93J//cg/y//L//f5/X/F7ue/P+aXg9GaRQt/x/7/leHmlSk/wcAAIAqiH3/a0JN9P8AAABQGrHvf22oif4fAAAASiP2/ROhJhXp/+X/y5X//7O/eeK1mfy//H+P7Zc0/x+ngfx/xcn/dyf/34P8v/z/Ks3/v+u7eV0t+X+qo2j5/9j3bw41qUj/DwAAAFUQ+/4toSb6fwAAACiN2PffE2qi/wcAAIDSiH3/1lCTivT/8v/lyv9H8v/y/922X9L8fyL/X23y/x00HaTy/z3I/8v/r9L8fzaw6//Hd7/y/wxG0fL/se9/XahJl8ZvsJ/EAwAAANxsse/fFmpSkb//AwAAQBXEvv/1oSb6fwAAACiN2PdvDzWpSP8v/y//L/8v/y//33n78v+r0+rK/69ZdEvRrv8/Jv8v/y//X7H8v+v/M1hFy//Hvv8NoSYV6f8BAACgCmLfvyPURP8PAAAApRH/5V3+7171/wAAAFBGse+fDDWpSP8v/y//X6X8f03+X/5f/r/0Vlf+f7Gi5f9d/1/+X/5f/l/+n+UoWv4/9v1vDDWpSP8PAAAAVRD7/vtCTfT/AAAAUBqx758KNdH/AwAAQGnEvn861KQi/b/8v/x/lfL/rv8v/y//X37y/93J//cg/1+q/H+Wyf/XBy//z61UtPx/7Pt3hppUpP8HAACAKoh9/65QE/0/AAAAlEbs+3eHmuj/AQAAoDRi378n1KQi/b/8v/y//L/8v/x/5+3L/69O8v/dyf/3IP+/Mvn/Tm+cVtP4l1DI/L/r/3OLFS3/H/v++0NNKtL/AwAAQBXEvn9vqIn+HwAAAEoj9v37Qk1C/3+T/nkSAAAAsIJi378/1KQif/+X/y9J/v+3/qFl2/L/8v/dtj+Y/P9a+f9Q5f+LpaT5//bD4obJ//cg/3/T8vPZ0ECGeMvGL/8v/8+NKVr+P/b9B0JNKtL/AwAAQBXEvv9NoSb6fwAAACiN2Pf/bKiJ/h8AAABKI/b9PxdqUpH+X/6/JPn/NvL/8v/dtu/6//L/ZVbS/P/AlCr/PyT/v5ry//3k51f7+OX/5f9Z7Obn/+NX/eX/Y99/MNSkIv0/AAAAVEHs+38+1ET/DwAAAKUR+/43h5ro/wEAAKA0Yt9/KNSkIv3/DeT/G3fK/7eS/28dv/x/5/lRrfz/m7N2Rcz/1yeP/H+5FDj/P9rP9uX/Xf9f/n9Fxt/+o2Yg45f/l/9nsaJd/z/2/W8JNalI/w8AAABVEPv+B0JN9P8AAABQGrHvf2uoif4fAAAASiP2/W8LNalI/+/6//L/8v/y/67/33n78v+rU4Hz/32R/5f/l/9fveOX/5f/Z7Gi5f9j3/9gqElF+n8AAACogtj3vz3URP8PAAAApRH7/neEmuj/AQAAoDRi3//OUJOK9P/y//L/8v/y//L/nbcv/786yf93J//fg/y//L/8v/w/A1W0/H/s+98ValKR/h8AAACqIPb9D4Wa6P8BAACgNGLf/+5QE/0/AAAAlEbs+98TalKR/l/+X/5f/l/+X/6/8/bl/1cn+f/uVib/P5oeRv5f/l/+X/5f/r/aipb/j33/e0NNKtL/AwAAQBXEvv8XQk30/wAAAFAase9/X6iJ/h8AAABKI/b9vxhqUpH+X/5f/r9Y+f+Fi83ryf/L/2eDyv/XV5L/rwT5/+5c/7+HDvn/NfL/8v/y//L/3LCi5f9j3//+UJOK9P8AAABQBbHv/0Coif4fAAAASiP2/R8MNdH/AwAAQGnEvv/hUJOK9P/y/5XM/6enXLz8v+v/95P/H1kv/5+5/r/8/xLk/7uT/+/B9f/l/+X/5f8ZqKLl/2Pf/0ioSUX6fwAAAKiC2Pd/KNRE/w8AAAClEfv+Xwo10f8DAABAacS+/8OhJhXp/+X/K5n/L/D1/8uW/x9pmR9Vuv7/eNPrmeal/L/8/wqQ/+9O/r8H+X/5/yLn/8NsXrvE+vL/FFHR8v+x7/9IqElF+n8AAACogtj3/3Koif4fAAAASiP2/b8SaqL/BwAAgNKIff+vhppUpP8vYf7/Uib/L/9fmPx/6/yoUv7f9f8Xk/9fGfL/3cn/9yD/L/9f5Px/D/L/FFHR8v+x7/+1UJMlG7/n/6uPpwkAAAAUSOz7PxpqUpG//wMAAEAVxL7/cKiJ/h8AAABKI/b9R0JNKtL/lzD/v8zr/8crqvbK/7deeVX+v3X88v9Zh/kxJP8v/y//vwIGl/9/1e1ZJv8v/y//L/8v/y//z3IULf8f+/6joSYV6f8BAACgCmLf/+uhJvp/AAAAKI3Y9x8LNdH/AwAAQOGNpERwd7Hvnwk1qUj/fwvz/6PFzP+X7fr/tfDYNz///1P5f9f/D+T/O5P/Xxmu/9+d/H8P8v/y//L/8v8MVNHy/7Hvnw01qUj/DwAAACWWfh0c+/7joSb6fwAAACiN2PefCDXR/wMAAEBpxL7/Y6EmFen/Xf+/7Pl/1/8vZv5/pGV5+f+c/L/8/yDI/3c3wPz/WByf/L/8fyT/L/8v/0+7ouX/Y98/F2pSkf4fAAAAqiD2/R8PNdH/AwAAQGnEvv8ToSb6fwAAACiN2Pf/P3v30WTXVfVx+NhYaQQfgbFHDGFkPgJTZlQxxUSTgyRyBpNzMBmTMybYYHLOOZicozHBUCXK0lpLat3b57bUR33P2ft5JgurLPeV3fit/6v6se8Xt3Sy//X/+v/e+//LhuGE9//1/+u+vv5/mfT/47z/v4H+X/+v/9f/M6m59f+5+6+OWzrZ/wAAANCD3P33j1vsfwAAAGhG7v4HxC32PwAAADQjd/8D45ZO9r/+X//fe/8/bOX9/51/vv7/DP2//n8KK/39Fev/vN2i8F37/7vd/Zr76P/1//r/Ufp//b/+n/PNrf/P3f+guKWT/Q8AAAA9yN3/4LjF/gcAAIBm5O5/SNxi/wMAAEAzcvdfE7d0sv/1//p//f8i+v/L8q9xyfv/m/T/+v9l8/7/OP3/Bvp//b/+X//PpObW/+fuf2jc0sn+BwAAgB7k7n9Y3GL/AwAAQDNy9z88brH/AQAAoBm5+x8Rt3Sy//X/+n/9/yL6/9tuOH7Y+//n/Xr0//r/dfT/4/T/G+j/9f/6f/0/k5pb/5+7/5FxSyf7HwAAAHqQu/9RcYv9DwAAAM3I3f/ouMX+BwAAgGbk7n9M3NLJ/tf/6//1/xP2/yeHYbhk/f+g/z/v16P/1/+vc91w9t8J+v9V+v8NNvT/w6D/H7Pnfn79L285n38X+n/9P6vm1v/n7n9s3HLPYTh8sb9IAAAAYFZy9z8ubunk9/8BAACgB7n7j8ct9j8AAAA0I3f/ibilk/2v/9f/6/+X8v6//l//r//fC+//j9t//3/lXa6+b7/9v/f/x3n/f+r+/47vDP0/yza3/j93/8m4pZP9DwAAAD3I3f/4uMX+BwAAgGbk7n9C3GL/AwAAQDNy9z8xbulk/+v/W+v/77Tj553T/5+uXfT/+v+L6f8P1V9J/6//nz/9/zjv/29w+l9zx+oP9f/6f+//6//Zn7n1/7n7nxS3dLL/AQAAoAe5+58ct9j/AAAA0Izc/U+JW+x/AAAAaEbu/qfGLZ3sf/1/a/3/zp/n/X/9/7qv7/1//X/LLq6/v7L+Zy70/6Hr/r+B9/8v8rtm2/38fm378+v/9f+smlv/n7v/aXFLJ/sfAAAAepC7/+lxi/0PAAAAzcjd/4y4xf4HAACAZuTuf2bc0sn+1//r/5fR/+dX0P/r/y99/5/0/8vk/f9x+v8NWun/L9K2+/mlf379v/6fVXPr/3P3Pytu6WT/AwAAQA9y9z87brH/AQAAoBm5+58Tt9j/AAAA0Izc/c+NWzrZ//p//f8y+n/v/+v/vf+v/98b/f84/f8G+n/9v/5f/8+k5tb/5+6/Nm7pZP8DAABAD3L3Py9usf8BAACgGbn7nx+3XMj+PzT1pwIAAACmlLv/BXFLJ7//r//X/+v/9f/6//VfX/+/TPr/cfr/DTrv/4cT+n/9v/6fac2o/z/nZx0dXhi3dLL/AQAAoAe5+18Ut9j/AAAA0Izc/S+OW+x/AAAAaEbu/pfELZ3s//b6/yNL7f9P53xt9f/HhmHQ/w+d9v/HzvnnWd+X+n/9/wHQ/4/T/2/Qef+/7X5+6Z9f/6//Z9WM+v/Tf5y7/6VxSyf7HwAAAHqQu/9lcYv9DwAAAM3I3f/yuMX+BwAAgGbk7n9F3NLJ/m+v//f+/zCb/t/7/+d/f/TU/3v/f5X+/2Do/8fp/zfQ/+v/9f/6fyY1t/4/d/8r46bDhy76lwgAAADMTO7+V8Utnfz+PwAAAPQgd/+r4xb7HwAAABbq2pUfyd3/mrilk/2v/5+2/z98zo/p//X/539/6P/1//r/S29Tf7/pb5n+P+j/9f/6f/2//p8JzK3/z93/2rilk/0PAAAAPcjdf13cYv8DAABAM3L3vy5usf8BAACgGbn7Xx+3dLL/9f/e/9f/6/839f9nn0PV/+v/58/7/+MW0f/frP/X/y/z80/Q/x85+x/1/7ThAvr/U6dOHb/k/X/u/jfELZ3sfwAAAOhB7v43xi32PwAAADQjd/+b4hb7HwAAAJqRu//NcUsn+1//32n/n9/qy+r/TwyD/t/7//p//f84/f+4RfT/3v/X/y/083v/X//Pqrm9/5+7/y1xSyf7HwAAAHqQu/+tcYv9DwAAAM3I3X993GL/AwAAQDNy978tbulk/+v/O+3/vf+v/9f/H3T/f/ug/z8Qi+j/j+3+9efe/5/U/+v/R3TX/9/rHjv+UP+v/2fV3Pr/3P1vj1s62f8AAADQg9z974hb7H8AAABoRu7+d8Yt9j8AAAA0I3f/u+KmKzrZ//p//b/+X/+v/1//9Q/4/f/DwzDo/yewiP5/xNz7/2ne/z//v+Vn6f/1/0v+/Pp//T+r5tb/5+5/d9zSyf4HAACAHuTuf0/cdMT+BwAAgGbk7n9v3GL/AwAAQDNy978vbulk/+v/9f/6f/1/8/3/yUX0/97/n4j+f9w8+v/d6f/1/0v+/Pp//T97t63+P3f/++OWTvY/AAAA9CB3/wfiFvsfAAAAmpG7/4Nxi/0PAAAAzcjd/6G4pZP9r//X/19I/5+fU//fVv9/ZHb9/9Edf71O3v/X/09E/z9O/7+B/l//r/+/Vv/PlOb2/n/u/g/HLZ3sfwAAAOhB7v4b4tb/69b+BwAAgGbk7v9I3GL/AwAAQDNy9380bulk/+v/9f/e/9f/N//+v/6/K/r/cfr/DfT/+n/9v/f/mdTc+v/c/R+LWzrZ/wAAANCD3P0fj1vsfwAAAGhG7v4b4xb7HwAAAJqRu/+muKWT/a//1//r//X/+v8z/wz1/23Q/487mP7/mP5f/1/9/GXx3wL9v/5/08+nTXPr/3P3fyJu6WT/AwAAQA9y938ybrH/AQAAoBm5+2+OW+x/AAAAWKQr1vxY7v5PxS2d7H/9v/5f/6//1/+v//r6/2XaSv+f3xT6f+//h376/7vu+KOlvf9//v/90v/r/5ne3Pr/3P2fjls62f8AAADQg9z9n4lb7H8AAABoRu7+z8Yt9j8AAAA0I3f/5+KWTva//l//r//X/+v/1399/f8yef9/nP5/A/3/Vt/PX/rn1//r/1k1t/4/d//n45ZO9j8AAAD0IHf/F+IW+x8AAACakbv/i3GL/Q8AAADNOL37My7rcP/r//X/+n/9v/5//dfX/y+T/n+c/n8D/b/+X/+v/2dSc+v/v3T6Zx0dvhy3dLL/AQAAoAe5+78St9j/AAAA0Izc/V+NW+x/AAAAaEbu/q/FLZ3s/733/6cG/f/u9P87P//0/f+pU6eO6//1/zt/PWf7/1v0/xT9/zj9/wb6f/2//l//z6Tm1v/n7v963NLJ/gcAAIAe5O7/Rtxi/wMAAEAzcvd/M26x/wEAAKAZufu/Fbd0sv+9/z+D/v+o/t/7//r/wfv/q/3/5Wf+paz/vzD6/3H6/w1a7P+P7v2Xv+1+fr+2/fn1//p/Vs2t/8/d/+24pZP9DwAAAD3I3f+duMX+BwAAgGbk7v9u3GL/AwAAQDNy938vbulk/+v/D67/v+PvXS/v/x8b1n9+/b/+X//v/f9LTf8/Tv+/QYv9/wXYdj+/9M+v/9f/s2pu/X/u/u/HLTuH36EL+1UCAAAAc5K7/wdxSye//w8AAAA9yN3/w7jF/gcAAIBm5O7/UdzSyf7X/8/g/f8G+3/v/6///tD/z7r/v1z/3wb9/zj9/wb6f/2//n+i/j+/m/X/vZtb/5+7/8dxSyf7HwAAAHqQu/8ncYv9DwAAAM3I3f/TuMX+BwAAgGbk7r8lbjln/69ru1uh/9f/6//1//r/9V9f/79M+v9xe+3/jwz76/+T/l//r//vtf/3/j9nzK3/z93/s7jF7/8DAADA4hza5cdz9/88brH/AQAAoBm5+38Rt9j/AAAA0Izc/b+MW269fFsf6UDp//X/+n/9v/5//dfX/y+T/n/cLN//v/7G+o/6/yb6/6v0/230/8Og/2f/5tb/5+7/Vdzi9/8BAACgGbn7fx232P8AAADQjNz9v4lb7H8AAABoRu7+38Ytnex//b/+f5/9/+k0U/9/hv7/DP3/evr/g6H/HzfL/v8c+v8m+n/v/zfS/3v/nynMrf/P3f+7uKWT/Q8AAAA9yN3/+7jF/gcAAIBm5O7/Q9xi/wMAAEAzcvf/MW7pZP9vrf+Pv9X6/8X3/97/1//r//X/s6L/H6f/30D/r//X/+v/mdTc+v/c/X+KWzrZ/wAAANCD3P1/jlvsfwAAAGhG7v6/xC32PwAAADQjd/9f45ZO9r/3//X/+n/9v/5//dfX/y+T/n+c/n+9+gel/9f/6//1/0xqbv1/7v6/xS2d7H8AAADoQe7+v8ct9j8AAAA0I3f/rXGL/Q8AAADNyN3/j7ilk/2v/9f/6//1//r/9V9f/79M+v9x2+z/733nzV/W+/9b7//zI+j/9f/6fyYxt/4/d/9tcUsn+x8AAAB6kLv/n3GL/Q8AAADNyN3/r7jF/gcAAIBm5O7/d9zSyf7f0P8fqT9R/z9K/7/z8+v/139/NNz/7whc9f/r6f8Phv5/3HLe/4+fr//fwfv/8/78+n/9P6vm1v/n7v9P3NLJ/gcAAIAe5O6/PW6x/wEAAKAZufv/G7fY/wAAANCM3P3/i1s62f/e/19S/3+V/l//P9f+fwf9/3r6/4Oh/x+3nP7f+//r6P/n/fn1//p/Vs2t/8/d//8AAAD//ym6NlQ=")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x800007, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00')

108.846708ms ago: executing program 2 (id=1865):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

51.867715ms ago: executing program 2 (id=1866):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000001b80)={0x8, 0x6, {0x54, 0x0, 0x2, {0xc, 0x10}, {0xcf05, 0x2}, @rumble={0x7, 0x8}}, {0x52, 0xa8b, 0x6, {0x1, 0x6}, {0x6, 0x2}, @cond=[{0x7, 0x6, 0x6, 0x7, 0x401, 0x2}, {0x9, 0x3, 0x2, 0x1, 0x1, 0x7e}]}})

0s ago: executing program 2 (id=1867):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x0)

kernel console output (not intermixed with test programs):

  139.605901][ T8585] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  139.613083][ T8585] hpfs: filesystem error: improperly stopped
[  139.615376][ T8585] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  139.618665][ T8585] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  139.624268][ T8585] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  139.668433][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  139.741740][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029988400: rx timeout, send abort
[  139.744998][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029988c00: abort rx timeout. Force session deactivation
[  139.841162][   T10] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  139.844785][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.852139][   T10] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  139.855746][   T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  139.859589][   T10] usb 2-1: Manufacturer: syz
[  139.862243][ T8593] loop0: detected capacity change from 0 to 32768
[  139.868022][   T10] usb 2-1: config 0 descriptor??
[  139.869022][ T8593] XFS: attr2 mount option is deprecated.
[  139.905289][ T8593] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  139.909024][ T8593] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  139.919443][ T8593] XFS (loop0): Ending clean mount
[  139.922348][ T8593] XFS (loop0): Quotacheck needed: Please wait.
[  139.926164][   T10] rc_core: IR keymap rc-hauppauge not found
[  139.928427][   T10] Registered IR keymap rc-empty
[  139.931174][   T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  139.933184][ T8593] XFS (loop0): Quotacheck: Done.
[  139.935912][   T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8
[  139.970604][ T5844] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.075005][   T51] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  140.093063][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  140.097784][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.101198][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.112087][   T10] usb 2-1: USB disconnect, device number 15
[  140.223623][   T51] usb 3-1: Using ep0 maxpacket: 32
[  140.229067][   T51] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  140.232732][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.238683][   T51] usb 3-1: Product: syz
[  140.240389][   T51] usb 3-1: Manufacturer: syz
[  140.240785][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029988400: abort rx timeout. Force session deactivation
[  140.242177][   T51] usb 3-1: SerialNumber: syz
[  140.256733][   T51] usb 3-1: config 0 descriptor??
[  140.260527][   T51] cdc_ether 3-1:0.0: More than one union descriptor, skipping ...
[  140.264598][   T51] usb 3-1: bad CDC descriptors
[  140.267087][   T51] usb 3-1: unsupported MDLM descriptors
[  140.329884][ T8619] loop0: detected capacity change from 0 to 32768
[  140.412979][ T8619] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  140.412995][ T8619]   allowing incompatible features above 0.0: (unknown version)
[  140.413000][ T8619]   features: 
[  140.424918][ T8619] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  140.427681][ T8619] bcachefs (loop0): initializing new filesystem
[  140.436295][ T8619] bcachefs (loop0): going read-write
[  140.440014][ T8619] bcachefs (loop0): marking superblocks
[  140.444943][ T8619] bcachefs (loop0): initializing freespace
[  140.448065][ T8619] bcachefs (loop0): done initializing freespace
[  140.451129][ T8619] bcachefs (loop0): reading snapshots table
[  140.453542][ T8619] bcachefs (loop0): reading snapshots done
[  140.463416][   T51] usb 3-1: USB disconnect, device number 12
[  140.464465][ T8619] bcachefs (loop0): done starting filesystem
[  140.494221][ T5844] bcachefs (loop0): shutting down
[  140.496077][ T5844] bcachefs (loop0): going read-only
[  140.498055][ T5844] bcachefs (loop0): finished waiting for writes to stop
[  140.501001][ T5844] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  140.513473][ T5844] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  140.517467][ T5844] bcachefs (loop0): clean shutdown complete, journal seq 5
[  140.520162][ T5844] bcachefs (loop0): marking filesystem clean
[  140.529711][ T5844] bcachefs (loop0): shutdown complete
[  140.671972][ T8634] loop1: detected capacity change from 0 to 65
[  140.675477][ T8634] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  140.740062][ T8636] loop1: detected capacity change from 0 to 2048
[  140.744886][ T8636] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.821444][ T8640] Falling back ldisc for ptm0.
[  141.079603][ T8663] ucma_write: process 785 (syz.2.1040) changed security contexts after opening file descriptor, this is not allowed.
[  141.162171][ T8653] loop1: detected capacity change from 0 to 32768
[  141.188092][ T8653] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.223560][ T8672] loop2: detected capacity change from 0 to 4096
[  141.229855][ T8672] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  141.232733][ T8672] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  141.238335][ T8653] XFS (loop1): Ending clean mount
[  141.241617][ T8653] XFS (loop1): Quotacheck needed: Please wait.
[  141.241741][ T8672] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  141.247239][ T8672] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  141.250581][ T8653] XFS (loop1): Quotacheck: Done.
[  141.253643][ T8672] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00
[  141.262504][ T8672] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00
[  141.269696][ T8672] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00
[  141.288150][ T8672] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00
[  141.291327][ T8672] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00
[  141.294535][ T8672] ntfs3(loop2): try to read out of volume at offset 0x3fffffe0c00
[  141.324151][ T5845] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.746506][ T8687] ptrace attach of "/syz-executor exec"[8688] was attempted by "/syz-executor exec"[8687]
[  142.261696][ T8699] loop2: detected capacity change from 0 to 32768
[  142.264844][ T8699] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1051 (8699)
[  142.273835][ T8699] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.278047][ T8699] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  142.305316][ T8699] BTRFS info (device loop2): enabling ssd optimizations
[  142.309072][ T8699] BTRFS info (device loop2): enabling free space tree
[  142.329452][ T5853] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.366474][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  142.475869][   T51] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  142.535425][   T10] usb 1-1: Using ep0 maxpacket: 16
[  142.545979][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[  142.549622][   T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  142.552709][   T10] usb 1-1: Product: syz
[  142.564991][   T10] usb 1-1: SerialNumber: syz
[  142.568364][   T10] usb 1-1: config 0 descriptor??
[  142.572829][   T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  142.578752][   T10] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  142.582254][   T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  142.584165][   T10] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  142.618875][ T8733] loop2: detected capacity change from 0 to 32768
[  142.621750][ T8733] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1060 (8733)
[  142.629131][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.632288][   T51] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  142.636964][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.640486][   T51] usb 2-1: config 0 descriptor??
[  142.643467][ T8733] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.647668][ T8733] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  142.701324][ T8733] BTRFS info (device loop2): rebuilding free space tree
[  142.714583][ T8733] BTRFS info (device loop2): disabling free space tree
[  142.717009][ T8733] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  142.720153][ T8733] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  142.726898][ T8733] BTRFS info (device loop2): enabling ssd optimizations
[  142.729111][ T8733] BTRFS info (device loop2): force clearing of disk cache
[  142.731352][ T8733] BTRFS info (device loop2): enabling auto defrag
[  142.734305][ T8733] BTRFS info (device loop2): doing ref verification
[  142.752829][   T33] audit: type=1800 audit(1756214107.052:62): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1060" name="file1" dev="loop2" ino=258 res=0 errno=0
[  142.771822][   T10] usb 1-1: USB disconnect, device number 14
[  142.791081][ T5853] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.987324][ T8768] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1068'.
[  143.015348][ T8770] loop2: detected capacity change from 0 to 512
[  143.020053][ T8770] EXT4-fs: Ignoring removed bh option
[  143.023836][ T8770] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  143.026971][ T8770] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  143.030803][ T8770] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  143.034531][ T8770] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  143.039351][ T8770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.054195][   T51] nintendo 0003:057E:200E.0005: unbalanced delimiter at end of report description
[  143.059112][   T51] nintendo 0003:057E:200E.0005: HID parse failed
[  143.062329][   T51] nintendo 0003:057E:200E.0005: probe - fail = -22
[  143.064709][   T51] nintendo 0003:057E:200E.0005: probe with driver nintendo failed with error -22
[  143.088637][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.248412][   T10] usb 2-1: USB disconnect, device number 16
[  143.418467][ T8782] loop0: detected capacity change from 0 to 32768
[  143.441546][ T8782] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  143.465693][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  144.482818][ T8800] loop0: detected capacity change from 0 to 8192
[  144.727438][   T51] Process accounting resumed
[  145.098346][ T8828] loop0: detected capacity change from 0 to 256
[  145.104114][ T8828] exfat: Deprecated parameter 'namecase'
[  145.115675][ T8828] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  145.594235][ T8837] loop2: detected capacity change from 0 to 8192
[  146.048986][ T8859] loop1: detected capacity change from 0 to 4096
[  147.105937][   T33] audit: type=1326 audit(1756214111.380:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.0.1109" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba35b8ebe9 code=0x0
[  147.225297][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  147.330933][ T8883] loop1: detected capacity change from 0 to 32768
[  147.367482][ T8883] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  147.367500][ T8883]   allowing incompatible features above 0.0: (unknown version)
[  147.367506][ T8883]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  147.384424][ T8883] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  147.387427][ T8883] bcachefs (loop1): initializing new filesystem
[  147.391912][   T10] usb 3-1: config index 0 descriptor too short (expected 63186, got 210)
[  147.396001][   T10] usb 3-1: config 0 has an invalid interface number: 106 but max is 0
[  147.396892][ T8883] bcachefs (loop1): going read-write
[  147.399110][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.399121][   T10] usb 3-1: config 0 has no interface number 0
[  147.399148][   T10] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  147.399168][   T10] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  147.415964][   T10] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  147.416265][ T8883] bcachefs (loop1): marking superblocks
[  147.422039][   T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  147.427162][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64
[  147.430497][   T10] usb 3-1: SerialNumber: syz
[  147.430622][ T8883] bcachefs (loop1): initializing freespace
[  147.437614][ T8883] bcachefs (loop1): done initializing freespace
[  147.439833][   T10] usb 3-1: config 0 descriptor??
[  147.443710][ T8883] bcachefs (loop1): reading snapshots table
[  147.447062][ T8883] bcachefs (loop1): reading snapshots done
[  147.454601][ T8883] bcachefs (loop1): done starting filesystem
[  147.466358][   T33] audit: type=1800 audit(1756214111.802:64): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1114" name="file1" dev="loop1" ino=4098 res=0 errno=0
[  147.471690][   T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  147.487938][ T5845] bcachefs (loop1): shutting down
[  147.490424][ T5845] bcachefs (loop1): going read-only
[  147.492328][ T5845] bcachefs (loop1): finished waiting for writes to stop
[  147.495838][ T5845] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  147.512108][ T5845] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  147.516745][ T5845] bcachefs (loop1): clean shutdown complete, journal seq 4
[  147.519850][ T5845] bcachefs (loop1): marking filesystem clean
[  147.531847][ T5845] bcachefs (loop1): shutdown complete
[  147.658160][ T5908] usb 3-1: Failed to submit usb control message: -71
[  147.658233][   T10] usb 3-1: USB disconnect, device number 13
[  147.660811][ T5908] usb 3-1: unable to send the bmi data to the device: -71
[  147.660826][ T5908] usb 3-1: unable to get target info from device
[  147.660833][ T5908] usb 3-1: could not get target info (-71)
[  147.660845][ T5908] usb 3-1: could not probe fw (-71)
[  148.872800][ T8916] sd 0:0:0:0: PR command failed: 1026
[  148.875046][ T8916] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  148.877735][ T8916] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  149.458153][   T51] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  149.512282][ T8948] netfs: Couldn't get user pages (rc=-14)
[  149.671536][   T51] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  149.675491][   T51] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  149.679039][   T51] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  149.683511][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.700683][ T8931] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  149.709331][   T51] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  149.965980][   T51] usb 3-1: USB disconnect, device number 14
[  150.389710][   T51] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  150.539011][   T51] usb 1-1: Using ep0 maxpacket: 32
[  150.543819][   T51] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  150.546883][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.551744][   T51] usb 1-1: config 0 descriptor??
[  150.555624][   T51] gspca_main: nw80x-2.14.0 probing 055f:d001
[  150.757920][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  150.826763][ T8966] netlink: 'syz.2.1144': attribute type 4 has an invalid length.
[  150.908806][   T10] usb 2-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  150.912153][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.916063][   T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 33
[  150.926711][   T10] usb 2-1: New USB device found, idVendor=1039, idProduct=12b6, bcdDevice=af.00
[  150.930395][   T10] usb 2-1: New USB device strings: Mfr=99, Product=0, SerialNumber=0
[  150.933629][   T10] usb 2-1: Manufacturer: syz
[  150.936787][   T10] usb 2-1: config 0 descriptor??
[  151.144678][   T10] usb 2-1: USB disconnect, device number 17
[  151.160238][ T5312] usb 1-1: USB disconnect, device number 15
[  151.810804][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'.
[  151.859723][ T8992] netlink: 'syz.2.1156': attribute type 29 has an invalid length.
[  151.864200][ T8992] netlink: 'syz.2.1156': attribute type 29 has an invalid length.
[  151.867461][ T8992] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1156'.
[  151.925563][ T8982] loop1: detected capacity change from 0 to 32768
[  151.953644][ T8982] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  151.961299][ T8982] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  151.970148][ T8982] XFS (loop1): Ending clean mount
[  151.983104][ T5312] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  151.993145][ T5845] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  152.030852][ T8996] loop2: detected capacity change from 0 to 32768
[  152.047721][ T8996] jfs_mkdir: dtInsert returned -EIO
[  152.049411][ T8996] ERROR: (device loop2): jfs_mkdir: 
[  152.049411][ T8996] 
[  152.052157][ T8996] ERROR: (device loop2): remounting filesystem as read-only
[  152.147878][ T5312] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  152.151740][ T5312] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.159772][ T5312] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  152.172457][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.553071][ T5312] usb 1-1: usb_control_msg returned -32
[  152.554804][ T5312] usbtmc 1-1:16.0: can't read capabilities
[  152.726187][ T9031] 9pnet_fd: Insufficient options for proto=fd
[  153.059411][ T9046] loop1: detected capacity change from 0 to 512
[  153.063318][ T9046] EXT4-fs (loop1): Test dummy encryption mode enabled
[  153.080689][ T9046] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  153.087237][ T9042] loop2: detected capacity change from 0 to 40427
[  153.093305][ T9042] F2FS-fs (loop2): invalid crc value
[  153.122361][ T9046] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  153.123903][ T9042] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  153.129460][ T9042] F2FS-fs (loop2): Start checkpoint disabled!
[  153.133301][ T9046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.141028][ T9042] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  153.158593][ T9046] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[  153.162606][ T9046] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  153.185817][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.723815][   T27] kworker/u10:0: attempt to access beyond end of device
[  153.723815][   T27] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  153.731693][ T1091] kworker/u9:5: attempt to access beyond end of device
[  153.731693][ T1091] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  153.737366][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  153.737387][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.737398][ T1091] Workqueue: writeback wb_workfn (flush-7:2)
[  153.737424][ T1091] Call Trace:
[  153.737430][ T1091]  <TASK>
[  153.737436][ T1091]  dump_stack_lvl+0x189/0x250
[  153.737458][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.737474][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[  153.737488][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  153.737507][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  153.737527][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[  153.737549][ T1091]  f2fs_write_end_io+0x886/0xb60
[  153.737587][ T1091]  __submit_merged_bio+0x27a/0x6a0
[  153.737610][ T1091]  __submit_merged_write_cond+0x255/0x530
[  153.737629][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[  153.737659][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.737695][ T1091]  ? __pfx___switch_to+0x10/0x10
[  153.737714][ T1091]  ? sched_clock_cpu+0x74/0x430
[  153.737734][ T1091]  ? finish_task_switch+0x18b/0x950
[  153.737756][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.737774][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.737793][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.737812][ T1091]  do_writepages+0x32e/0x550
[  153.737838][ T1091]  __writeback_single_inode+0x145/0xff0
[  153.737856][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[  153.737876][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[  153.737904][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  153.737971][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.737988][ T1091]  wb_writeback+0x43b/0xaf0
[  153.738014][ T1091]  ? queue_io+0x301/0x590
[  153.738031][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[  153.738050][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.738064][ T1091]  wb_workfn+0x409/0xef0
[  153.738084][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[  153.738097][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.738110][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.738125][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  153.738138][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.738151][ T1091]  ? lock_acquire+0x5f/0x360
[  153.738172][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.738185][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  153.738197][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  153.738209][ T1091]  process_scheduled_works+0xae1/0x17b0
[  153.738232][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[  153.738252][ T1091]  worker_thread+0x8a0/0xda0
[  153.738273][ T1091]  kthread+0x711/0x8a0
[  153.738291][ T1091]  ? __pfx_worker_thread+0x10/0x10
[  153.738304][ T1091]  ? __pfx_kthread+0x10/0x10
[  153.738319][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.738332][ T1091]  ? __pfx_kthread+0x10/0x10
[  153.738347][ T1091]  ret_from_fork+0x3fc/0x770
[  153.738363][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[  153.738378][ T1091]  ? __switch_to_asm+0x39/0x70
[  153.738396][ T1091]  ? __switch_to_asm+0x33/0x70
[  153.738412][ T1091]  ? __pfx_kthread+0x10/0x10
[  153.738428][ T1091]  ret_from_fork_asm+0x1a/0x30
[  153.738451][ T1091]  </TASK>
[  153.739781][ T1091] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  153.865426][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  153.865443][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.865449][ T1091] Workqueue: writeback wb_workfn (flush-7:2)
[  153.865466][ T1091] Call Trace:
[  153.865469][ T1091]  <TASK>
[  153.865474][ T1091]  dump_stack_lvl+0x189/0x250
[  153.865486][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.865495][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[  153.865504][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  153.865514][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  153.865526][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[  153.865539][ T1091]  f2fs_write_end_io+0x886/0xb60
[  153.865549][ T1091]  __submit_merged_bio+0x27a/0x6a0
[  153.865560][ T1091]  __submit_merged_write_cond+0x255/0x530
[  153.865571][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[  153.865605][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.865628][ T1091]  ? __pfx___switch_to+0x10/0x10
[  153.865638][ T1091]  ? sched_clock_cpu+0x74/0x430
[  153.865651][ T1091]  ? finish_task_switch+0x18b/0x950
[  153.865663][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.865674][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.865689][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.865705][ T1091]  do_writepages+0x32e/0x550
[  153.865726][ T1091]  __writeback_single_inode+0x145/0xff0
[  153.865741][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[  153.865756][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[  153.865798][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  153.865827][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.865842][ T1091]  wb_writeback+0x43b/0xaf0
[  153.865856][ T1091]  ? queue_io+0x301/0x590
[  153.865866][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[  153.865876][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.865884][ T1091]  wb_workfn+0x409/0xef0
[  153.865921][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[  153.865935][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.865943][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.865952][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  153.865959][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.865966][ T1091]  ? lock_acquire+0x5f/0x360
[  153.865978][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.865984][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  153.865991][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  153.865999][ T1091]  process_scheduled_works+0xae1/0x17b0
[  153.866012][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[  153.866023][ T1091]  worker_thread+0x8a0/0xda0
[  153.866036][ T1091]  kthread+0x711/0x8a0
[  153.866046][ T1091]  ? __pfx_worker_thread+0x10/0x10
[  153.866053][ T1091]  ? __pfx_kthread+0x10/0x10
[  153.866062][ T1091]  ? rcu_is_watching+0x15/0xb0
[  153.866069][ T1091]  ? __pfx_kthread+0x10/0x10
[  153.866078][ T1091]  ret_from_fork+0x3fc/0x770
[  153.866086][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[  153.866094][ T1091]  ? __switch_to_asm+0x39/0x70
[  153.866104][ T1091]  ? __switch_to_asm+0x33/0x70
[  153.866113][ T1091]  ? __pfx_kthread+0x10/0x10
[  153.866121][ T1091]  ret_from_fork_asm+0x1a/0x30
[  153.866134][ T1091]  </TASK>
[  153.975426][ T1091] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  154.035173][   T51] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  154.194671][   T51] usb 2-1: Using ep0 maxpacket: 32
[  154.198665][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  154.204097][   T51] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  154.208090][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.211385][   T51] usb 2-1: Product: syz
[  154.213002][   T51] usb 2-1: Manufacturer: syz
[  154.216255][   T51] usb 2-1: SerialNumber: syz
[  154.219063][   T51] usb 2-1: config 0 descriptor??
[  154.225315][   T51] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9
[  154.231308][   T51] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  154.238734][   T51] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8
[  154.434062][   T51] usb 2-1: USB disconnect, device number 18
[  154.747376][ T5312] usb 1-1: USB disconnect, device number 16
[  154.781933][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'.
[  154.802106][ T9076] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  154.828914][ T9078] loop0: detected capacity change from 0 to 1024
[  154.831377][ T9078] EXT4-fs: Ignoring removed bh option
[  154.846901][ T9078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.859177][ T9078] EXT4-fs error (device loop0): ext4_get_first_dir_block:3540: inode #11: comm syz.0.1189: directory missing '.'
[  154.865774][ T9078] EXT4-fs (loop0): Remounting filesystem read-only
[  154.882528][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.135600][ T9087] loop0: detected capacity change from 0 to 32768
[  155.138745][ T9087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1191 (9087)
[  155.152273][ T9087] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  155.201606][ T9087] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  155.300338][ T9087] BTRFS info (device loop0): rebuilding free space tree
[  155.306907][ T9087] BTRFS info (device loop0): allowing degraded mounts
[  155.309551][ T9087] BTRFS info (device loop0): enabling ssd optimizations
[  155.312490][ T9087] BTRFS info (device loop0): enabling free space tree
[  155.314831][ T9087] BTRFS info (device loop0): force clearing of disk cache
[  155.317045][ T9087] BTRFS info (device loop0): use zstd compression, level 3
[  155.319320][ T9087] BTRFS info (device loop0): max_inline set to 0
[  155.353567][ T5844] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  155.586999][ T9113] loop0: detected capacity change from 0 to 2048
[  155.593012][ T9113] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  155.596210][ T9113] UDF-fs: Scanning with blocksize 512 failed
[  155.605149][ T9113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.742825][ T9123] loop0: detected capacity change from 0 to 1024
[  155.746304][ T9123] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  155.751900][ T9123] JBD2: no valid journal superblock found
[  155.753961][ T9123] EXT4-fs (loop0): Could not load journal inode
[  155.890498][ T9119] loop2: detected capacity change from 0 to 32768
[  155.910374][ T9119] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.948245][ T9119] XFS (loop2): Ending clean mount
[  155.958009][ T9119] XFS (loop2): Quotacheck needed: Please wait.
[  155.997808][ T9119] XFS (loop2): Quotacheck: Done.
[  156.056689][ T5853] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.172659][ T9154] netlink: 'syz.2.1208': attribute type 1 has an invalid length.
[  156.175675][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'.
[  156.354726][ T9152] loop1: detected capacity change from 0 to 32768
[  156.359541][ T9152] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1210 (9152)
[  156.375743][ T9152] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  156.381163][ T9152] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  156.385135][ T9152] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  156.420426][ T9152] BTRFS info (device loop1): rebuilding free space tree
[  156.425474][ T9152] BTRFS info (device loop1): disabling free space tree
[  156.428033][ T9152] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  156.431209][ T9152] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  156.435702][ T9152] BTRFS info (device loop1): allowing degraded mounts
[  156.438358][ T9152] BTRFS info (device loop1): enabling ssd optimizations
[  156.440982][ T9152] BTRFS info (device loop1): enabling disk space caching
[  156.443536][ T9152] BTRFS info (device loop1): force clearing of disk cache
[  156.445950][ T9152] BTRFS info (device loop1): use zlib compression, level 3
[  156.474105][   T33] audit: type=1326 audit(1756214120.839:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.1215" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cccd8ebe9 code=0x7fc00000
[  156.538071][ T5845] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  156.557662][   T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  156.718312][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.722969][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.740221][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  156.743471][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.759459][   T10] usb 1-1: Product: syz
[  156.761253][   T10] usb 1-1: Manufacturer: syz
[  156.762867][   T10] usb 1-1: SerialNumber: syz
[  157.049687][   T10] usb 1-1: 0:2 : does not exist
[  157.054260][   T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  157.057790][ T9199] loop1: detected capacity change from 0 to 4096
[  157.073941][   T10] usb 1-1: USB disconnect, device number 17
[  157.088745][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.133457][   T33] audit: type=1326 audit(1756214121.500:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.1215" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cccd8ebe9 code=0x7fc00000
[  157.587512][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1226'.
[  157.629590][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1226'.
[  157.869504][ T9219] loop0: detected capacity change from 0 to 32768
[  157.878835][ T9219] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  157.902975][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  160.170364][ T9266] loop2: detected capacity change from 0 to 512
[  160.173305][ T9266] EXT4-fs (loop2): Test dummy encryption mode enabled
[  160.175799][ T9266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  160.186666][ T9266] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1248: bad orphan inode 131083
[  160.200902][ T9266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.236522][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.315463][ T9278] pim6reg: entered allmulticast mode
[  160.319581][ T9278] pim6reg: left allmulticast mode
[  160.382107][ T9274] loop1: detected capacity change from 0 to 32768
[  160.428576][ T9274] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  160.479713][ T9286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.566253][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  161.140364][ T9296] loop1: detected capacity change from 0 to 32768
[  161.153042][ T9296] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  161.207463][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  161.438628][ T9310] program syz.2.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.706367][ T9291] delete_channel: no stack
[  161.842456][ T9326] loop0: detected capacity change from 0 to 128
[  161.854191][ T9326] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  161.872386][ T9326] ext4 filesystem being mounted at /409/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  161.892251][ T9326] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.1272: No space for directory leaf checksum. Please run e2fsck -D.
[  161.899127][ T9326] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.1272: Directory block failed checksum
[  161.925283][ T5844] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.140462][ T9337] loop0: detected capacity change from 0 to 256
[  162.155482][ T9337] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  162.160821][ T9337] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  162.359246][ T9339] loop0: detected capacity change from 0 to 32768
[  162.379517][ T9339] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  162.398635][ T9354] loop1: detected capacity change from 0 to 512
[  162.409154][ T9339] XFS (loop0): Ending clean mount
[  162.412261][ T9339] XFS (loop0): Quotacheck needed: Please wait.
[  162.418244][ T9354] EXT4-fs (loop1): 1 orphan inode deleted
[  162.424554][ T9339] XFS (loop0): Quotacheck: Done.
[  162.427479][ T9354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.432774][   T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  162.436221][   T36] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u10:1: Failed to release dquot type 1
[  162.440494][ T9354] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.465809][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.478627][ T5844] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  162.624605][ T9359] loop2: detected capacity change from 0 to 32768
[  162.630206][ T9359] bcachefs (/dev/loop2): error validating superblock: Invalid time precision: 0 (min 1, max 1000000000)
[  162.634405][ T9359] bcachefs: bch2_fs_get_tree() error: invalid_sb_time_precision
[  162.648051][ T9367] loop1: detected capacity change from 0 to 1024
[  162.657336][ T9367] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  162.659489][ T9367] hfsplus: xattr searching failed
[  162.661417][ T9367] syz.1.1287: attempt to access beyond end of device
[  162.661417][ T9367] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  162.762833][ T9371] netlink: 'syz.1.1289': attribute type 2 has an invalid length.
[  162.916357][ T9365] loop0: detected capacity change from 0 to 32768
[  162.926463][ T9365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1285 (9365)
[  162.951689][ T9365] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.962517][ T9365] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  163.059374][ T9365] BTRFS info (device loop0): enabling free space tree
[  163.067903][ T9365] BTRFS info (device loop0): enabling auto defrag
[  163.070678][ T9365] BTRFS info (device loop0): force zlib compression, level 3
[  163.091746][ T9365] BTRFS info (device loop0): max_inline set to 0
[  163.095179][ T9378] loop2: detected capacity change from 0 to 32768
[  163.105752][ T9378] (syz.2.1292,9378,0):ocfs2_initialize_super:2093 ERROR: couldn't mount RDWR because of unsupported optional features (ffffff00).
[  163.113091][ T9378] (syz.2.1292,9378,0):ocfs2_fill_super:1177 ERROR: status = -22
[  163.137664][ T9365] BTRFS error (device loop0): target device  is invalid!
[  163.193232][ T5844] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.247227][ T9404] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  163.265522][ T9406] Invalid option length (0) for dns_resolver key
[  163.311799][   T51] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  163.463886][   T51] usb 2-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6
[  163.466786][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.469565][   T51] usb 2-1: Product: syz
[  163.471964][   T51] usb 2-1: Manufacturer: syz
[  163.473379][   T51] usb 2-1: SerialNumber: syz
[  163.542614][ T9414] loop2: detected capacity change from 0 to 32768
[  163.552430][ T9414] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  163.577553][ T9414] XFS (loop2): Ending clean mount
[  163.581435][ T9414] XFS (loop2): Quotacheck needed: Please wait.
[  163.591784][ T9414] XFS (loop2): Quotacheck: Done.
[  163.639888][ T5853] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  163.684257][   T51] pwc: Visionite VCS-UC300 USB webcam detected.
[  163.690540][   T51] pwc: Failed to set LED on/off time (-71)
[  163.693431][   T51] pwc: send_video_command error -71
[  163.695643][   T51] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  163.698897][   T51] Philips webcam 2-1:5.0: probe with driver Philips webcam failed with error -71
[  163.708204][   T51] usb 2-1: USB disconnect, device number 19
[  164.146067][ T9440] loop2: detected capacity change from 0 to 32768
[  164.310956][ T9452] tipc: Started in network mode
[  164.312567][ T9452] tipc: Node identity ac14140f, cluster identity 4711
[  164.314859][ T9452] tipc: New replicast peer: 255.255.255.255
[  164.317021][ T9452] tipc: Enabled bearer <udp:syz2>, priority 7
[  164.408938][ T5312] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  164.459028][   T51] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  164.619110][   T51] usb 1-1: too many configurations: 65, using maximum allowed: 8
[  164.623313][   T51] usb 1-1: config 0 has no interfaces?
[  164.626493][   T51] usb 1-1: config 0 has no interfaces?
[  164.630094][   T51] usb 1-1: config 0 has no interfaces?
[  164.633280][   T51] usb 1-1: config 0 has no interfaces?
[  164.636508][   T51] usb 1-1: config 0 has no interfaces?
[  164.638301][   T10] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  164.643313][   T51] usb 1-1: config 0 has no interfaces?
[  164.646635][   T51] usb 1-1: config 0 has no interfaces?
[  164.650189][   T51] usb 1-1: config 0 has no interfaces?
[  164.652443][   T51] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  164.657250][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.694529][   T51] usb 1-1: config 0 descriptor??
[  164.939770][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  164.942880][   T10] usb 2-1: config 0 has no interface number 0
[  164.945270][   T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  164.949713][   T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  164.953400][   T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  164.956913][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.962424][   T10] usb 2-1: config 0 descriptor??
[  164.967952][   T10] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  165.040552][   T10] usb 1-1: USB disconnect, device number 18
[  165.172740][ T5312] usb 2-1: USB disconnect, device number 20
[  165.437407][   T51] tipc: Node number set to 2886997007
[  165.475682][ T9470] loop2: detected capacity change from 0 to 4096
[  165.502022][ T9470] ntfs3(loop2): ino=5, "/" mi_enum_attr
[  165.507661][ T9470] ntfs3(loop2): ino=5, "/" mi_enum_attr
[  165.591903][ T9475] snd_dummy snd_dummy.0: control 0:8:0:syz0:0 is already present
[  166.059413][ T9476] loop2: detected capacity change from 0 to 40427
[  166.064101][ T9476] F2FS-fs (loop2): build fault injection rate: 14
[  166.067294][ T9476] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  166.073678][ T9476] F2FS-fs (loop2): invalid crc value
[  166.082441][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  166.093169][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  166.113873][ T9476] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  166.117244][ T9476] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  166.122461][ T9476] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  166.148980][ T9476] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  166.157877][ T9476] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  166.164764][ T9476] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_unlink+0x239/0xac0
[  166.185983][ T5853] syz-executor: attempt to access beyond end of device
[  166.185983][ T5853] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  166.194134][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  166.194150][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.194155][ T5853] Call Trace:
[  166.194159][ T5853]  <TASK>
[  166.194163][ T5853]  dump_stack_lvl+0x189/0x250
[  166.194179][ T5853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.194193][ T5853]  ? __pfx_queue_work_on+0x10/0x10
[  166.194206][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  166.194224][ T5853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  166.194242][ T5853]  f2fs_handle_critical_error+0x37c/0x540
[  166.194263][ T5853]  f2fs_write_end_io+0x886/0xb60
[  166.194283][ T5853]  __submit_merged_bio+0x27a/0x6a0
[  166.194301][ T5853]  __submit_merged_write_cond+0x255/0x530
[  166.194321][ T5853]  f2fs_write_data_pages+0x261d/0x3000
[  166.194351][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  166.194382][ T5853]  ? __mod_zone_page_state+0xd7/0x140
[  166.194396][ T5853]  ? folios_put_refs+0x560/0x640
[  166.194412][ T5853]  ? __pfx_folios_put_refs+0x10/0x10
[  166.194424][ T5853]  ? rcu_is_watching+0x15/0xb0
[  166.194437][ T5853]  ? lru_add+0xa2f/0xd80
[  166.194450][ T5853]  ? lru_add+0x198/0xd80
[  166.194462][ T5853]  ? folio_batch_move_lru+0x319/0x3a0
[  166.194471][ T5853]  ? filemap_get_folios_tag+0xed/0x630
[  166.194479][ T5853]  ? rcu_is_watching+0x15/0xb0
[  166.194486][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  166.194498][ T5853]  do_writepages+0x32e/0x550
[  166.194547][ T5853]  ? rcu_is_watching+0x15/0xb0
[  166.194555][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[  166.194566][ T5853]  filemap_fdatawrite+0x199/0x240
[  166.194577][ T5853]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  166.194596][ T5853]  ? rcu_is_watching+0x15/0xb0
[  166.194603][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[  166.194613][ T5853]  f2fs_sync_dirty_inodes+0x31f/0x830
[  166.194625][ T5853]  f2fs_write_checkpoint+0x95a/0x1df0
[  166.194638][ T5853]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  166.194656][ T5853]  ? kill_f2fs_super+0x298/0x6c0
[  166.194666][ T5853]  kill_f2fs_super+0x2c3/0x6c0
[  166.194675][ T5853]  ? __pfx_kill_f2fs_super+0x10/0x10
[  166.194681][ T5853]  ? radix_tree_delete_item+0x2b6/0x400
[  166.194693][ T5853]  ? shrinker_free+0x2ce/0x3e0
[  166.194702][ T5853]  deactivate_locked_super+0xbc/0x130
[  166.194712][ T5853]  cleanup_mnt+0x425/0x4c0
[  166.194722][ T5853]  task_work_run+0x1d4/0x260
[  166.194733][ T5853]  ? __pfx_task_work_run+0x10/0x10
[  166.194742][ T5853]  ? __x64_sys_umount+0x122/0x160
[  166.194752][ T5853]  ? __pfx___x64_sys_umount+0x10/0x10
[  166.194762][ T5853]  ? rcu_is_watching+0x15/0xb0
[  166.194770][ T5853]  exit_to_user_mode_loop+0xec/0x110
[  166.194781][ T5853]  do_syscall_64+0x2bd/0x3b0
[  166.194794][ T5853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.194802][ T5853]  ? exc_page_fault+0x9f/0xf0
[  166.194812][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.194820][ T5853] RIP: 0033:0x7f6cccd8ff17
[  166.194829][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  166.194837][ T5853] RSP: 002b:00007fff61ec37a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  166.194847][ T5853] RAX: 0000000000000000 RBX: 00007f6ccce11c05 RCX: 00007f6cccd8ff17
[  166.194852][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff61ec3860
[  166.194857][ T5853] RBP: 00007fff61ec3860 R08: 0000000000000000 R09: 0000000000000000
[  166.194862][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff61ec48f0
[  166.194867][ T5853] R13: 00007f6ccce11c05 R14: 0000000000028a6c R15: 00007fff61ec4930
[  166.194876][ T5853]  </TASK>
[  166.194882][ T5853] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  166.534075][ T9501] netlink: 'syz.2.1334': attribute type 15 has an invalid length.
[  166.587719][ T9507] loop2: detected capacity change from 0 to 128
[  166.601710][ T9507] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  166.624265][ T9507] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  166.718046][ T9499] loop1: detected capacity change from 0 to 40427
[  166.726791][ T9499] F2FS-fs (loop1): invalid crc value
[  166.729485][ T9513] loop2: detected capacity change from 0 to 2048
[  166.754863][ T9513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.766164][ T9512] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  166.766984][   T33] audit: type=1800 audit(1756214131.151:67): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1343" name="file1" dev="loop2" ino=15 res=0 errno=0
[  166.771079][ T9513] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  166.794289][ T9513] EXT4-fs (loop2): This should not happen!! Data will be lost
[  166.794289][ T9513] 
[  166.799346][ T9499] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  166.803269][ T9513] EXT4-fs (loop2): Total free blocks count 0
[  166.804916][ T9499] F2FS-fs (loop1): Start checkpoint disabled!
[  166.807168][ T9513] EXT4-fs (loop2): Free/Dirty block details
[  166.809465][   T33] audit: type=1800 audit(1756214131.151:68): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1343" name="file1" dev="loop2" ino=15 res=0 errno=0
[  166.810971][ T9513] EXT4-fs (loop2): free_blocks=4096
[  166.819897][ T9499] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  166.825534][ T9513] EXT4-fs (loop2): dirty_blocks=16
[  166.827256][ T9513] EXT4-fs (loop2): Block reservation details
[  166.829563][ T9513] EXT4-fs (loop2): i_reserved_data_blocks=1
[  166.876716][ T9513] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  166.929390][ T1091] kworker/u9:5: attempt to access beyond end of device
[  166.929390][ T1091] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  166.937612][ T1091] kworker/u9:5: attempt to access beyond end of device
[  166.937612][ T1091] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  166.943027][ T1091] CPU: 0 UID: 0 PID: 1091 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  166.943046][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.943056][ T1091] Workqueue: writeback wb_workfn (flush-7:1)
[  166.943078][ T1091] Call Trace:
[  166.943082][ T1091]  <TASK>
[  166.943088][ T1091]  dump_stack_lvl+0x189/0x250
[  166.943105][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.943118][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[  166.943131][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  166.943146][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  166.943163][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[  166.943181][ T1091]  f2fs_write_end_io+0x886/0xb60
[  166.943194][ T1091]  __submit_merged_bio+0x27a/0x6a0
[  166.943207][ T1091]  ? up_write+0x1c4/0x420
[  166.943219][ T1091]  __submit_merged_write_cond+0x44c/0x530
[  166.943233][ T1091]  f2fs_sync_node_pages+0x1479/0x15e0
[  166.943250][ T1091]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  166.943264][ T1091]  ? __percpu_counter_sum+0x1c2/0x1e0
[  166.943284][ T1091]  ? do_raw_spin_lock+0x121/0x290
[  166.943296][ T1091]  ? rcu_is_watching+0x15/0xb0
[  166.943306][ T1091]  ? blk_start_plug+0x52/0x1b0
[  166.943322][ T1091]  f2fs_write_node_pages+0x303/0x6e0
[  166.943334][ T1091]  ? xa_load+0x60/0x210
[  166.943350][ T1091]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  166.943363][ T1091]  ? do_raw_spin_lock+0x121/0x290
[  166.943375][ T1091]  ? rcu_is_watching+0x15/0xb0
[  166.943385][ T1091]  ? set_shrinker_bit+0x7c/0x350
[  166.943398][ T1091]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  166.943413][ T1091]  do_writepages+0x32e/0x550
[  166.943463][ T1091]  ? kvm_sched_clock_read+0x11/0x20
[  166.943480][ T1091]  __writeback_single_inode+0x145/0xff0
[  166.943495][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[  166.943507][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[  166.943526][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  166.943547][ T1091]  ? rcu_is_watching+0x15/0xb0
[  166.943559][ T1091]  wb_writeback+0x43b/0xaf0
[  166.943573][ T1091]  ? queue_io+0x301/0x590
[  166.943585][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[  166.943600][ T1091]  ? rcu_is_watching+0x15/0xb0
[  166.943610][ T1091]  wb_workfn+0x409/0xef0
[  166.943624][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[  166.943634][ T1091]  ? rcu_is_watching+0x15/0xb0
[  166.943643][ T1091]  ? rcu_is_watching+0x15/0xb0
[  166.943654][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  166.943664][ T1091]  ? rcu_is_watching+0x15/0xb0
[  166.943673][ T1091]  ? lock_acquire+0x5f/0x360
[  166.943688][ T1091]  ? rcu_is_watching+0x15/0xb0
[  166.943697][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  166.943706][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  166.943716][ T1091]  process_scheduled_works+0xae1/0x17b0
[  166.943738][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[  166.943753][ T1091]  worker_thread+0x8a0/0xda0
[  166.943770][ T1091]  kthread+0x711/0x8a0
[  166.943786][ T1091]  ? __pfx_worker_thread+0x10/0x10
[  166.943798][ T1091]  ? __pfx_kthread+0x10/0x10
[  166.943812][ T1091]  ? rcu_is_watching+0x15/0xb0
[  166.943821][ T1091]  ? __pfx_kthread+0x10/0x10
[  166.943833][ T1091]  ret_from_fork+0x3fc/0x770
[  166.943845][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[  166.943856][ T1091]  ? __switch_to_asm+0x39/0x70
[  166.943870][ T1091]  ? __switch_to_asm+0x33/0x70
[  166.943883][ T1091]  ? __pfx_kthread+0x10/0x10
[  166.943895][ T1091]  ret_from_fork_asm+0x1a/0x30
[  166.943915][ T1091]  </TASK>
[  166.943921][ T1091] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  166.995348][ T9527] netlink: 'syz.0.1349': attribute type 1 has an invalid length.
[  167.088198][ T9527] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1349'.
[  167.440602][ T9546] loop2: detected capacity change from 0 to 32768
[  167.443247][ T9546] XFS: ikeep mount option is deprecated.
[  167.445388][ T9546] XFS: ikeep mount option is deprecated.
[  167.447217][ T9546] XFS: noikeep mount option is deprecated.
[  167.469447][ T9546] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.473742][ T8223] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  167.486112][ T9546] XFS (loop2): Ending clean mount
[  167.513830][ T5853] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.567825][ T9558] macvtap1: entered allmulticast mode
[  167.570006][ T9558] veth1: entered allmulticast mode
[  167.572471][ T9558] veth1: left allmulticast mode
[  167.583637][ T5312] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  167.626770][ T8223] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  167.630178][ T8223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.632923][ T8223] usb 1-1: Product: syz
[  167.638979][ T8223] usb 1-1: Manufacturer: syz
[  167.640633][ T8223] usb 1-1: SerialNumber: syz
[  167.644051][ T8223] usb 1-1: config 0 descriptor??
[  167.649677][ T8223] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  167.662640][ T8223] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  167.667817][ T8223] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  167.734973][ T5312] usb 2-1: Using ep0 maxpacket: 16
[  167.746653][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.751495][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.758384][ T5312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  167.763789][ T5312] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  167.768093][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.771734][ T5312] usb 2-1: config 0 descriptor??
[  167.821138][ T9570] loop2: detected capacity change from 0 to 1024
[  167.830800][ T9570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.852092][ T8223] usb 1-1: USB disconnect, device number 19
[  167.892525][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.955602][ T5851] Bluetooth: hci2: unexpected cc 0x0402 length: 61 > 1
[  167.957823][ T5851] Bluetooth: hci2: Ignoring error of Inquiry Cancel command
[  167.962546][ T9576] loop2: detected capacity change from 0 to 64
[  168.185556][ T5312] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  168.189884][ T5312] microsoft 0003:045E:07DA.0007: no inputs found
[  168.192118][ T5312] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway
[  168.379634][ T9587] loop0: detected capacity change from 0 to 512
[  168.389494][ T5312] usb 2-1: USB disconnect, device number 21
[  168.416624][ T9587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.423969][ T9587] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.444850][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.722264][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  168.881677][   T10] usb 1-1: Using ep0 maxpacket: 8
[  168.885015][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  168.888644][   T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  168.892075][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.899148][   T10] usb 1-1: config 0 descriptor??
[  168.903555][   T10] hso 1-1:0.0: Can't find BULK IN endpoint
[  169.116155][ T8223] usb 1-1: USB disconnect, device number 20
[  169.137080][ T9615] loop1: detected capacity change from 0 to 16
[  169.143085][ T9615] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  169.147459][ T9615] erofs (device loop1): mounted with root inode @ nid 36.
[  169.153629][ T9615] erofs (device loop1): corrupted dir block 0 @ nid 36
[  169.331168][   T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  169.491785][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  169.498175][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  169.509661][   T10] usb 3-1: config 2 has an invalid interface number: 212 but max is 1
[  169.515102][   T10] usb 3-1: config 2 has an invalid interface number: 226 but max is 1
[  169.518719][   T10] usb 3-1: config 2 has no interface number 0
[  169.522212][   T10] usb 3-1: config 2 has no interface number 1
[  169.524641][   T10] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  169.528316][   T10] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  169.533172][   T10] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  169.537330][   T10] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  169.540436][   T10] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  169.545630][   T10] usb 3-1: config 2 interface 212 has no altsetting 0
[  169.559057][   T10] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  169.563388][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.566397][   T10] usb 3-1: Product: syz
[  169.567749][   T10] usb 3-1: Manufacturer: syz
[  169.569251][   T10] usb 3-1: SerialNumber: syz
[  169.815920][   T10] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input12
[  169.866150][   T10] usb 3-1: USB disconnect, device number 15
[  170.902520][ T9640] loop1: detected capacity change from 0 to 32768
[  171.000125][ T9640] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  171.000139][ T9640]   allowing incompatible features above 0.0: (unknown version)
[  171.000145][ T9640]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  171.013490][ T9640] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  171.016052][ T9640] bcachefs (loop1): initializing new filesystem
[  171.024076][ T9640] bcachefs (loop1): going read-write
[  171.027053][ T9640] bcachefs (loop1): marking superblocks
[  171.031715][ T9640] bcachefs (loop1): initializing freespace
[  171.035404][ T9640] bcachefs (loop1): done initializing freespace
[  171.038550][ T9640] bcachefs (loop1): reading snapshots table
[  171.041847][ T9640] bcachefs (loop1): reading snapshots done
[  171.053909][ T9640] bcachefs (loop1): done starting filesystem
[  171.109385][ T5845] bcachefs (loop1): shutting down
[  171.111299][ T5845] bcachefs (loop1): going read-only
[  171.113228][ T5845] bcachefs (loop1): finished waiting for writes to stop
[  171.116112][ T5845] bcachefs (loop1): flushing journal and stopping allocators, journal seq 1
[  171.127194][ T5845] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 2
[  171.131973][ T5845] bcachefs (loop1): clean shutdown complete, journal seq 3
[  171.135368][ T5845] bcachefs (loop1): marking filesystem clean
[  171.151929][ T5845] bcachefs (loop1): shutdown complete
[  171.229608][   T10] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  171.394953][ T9666] loop2: detected capacity change from 0 to 512
[  171.398282][ T9666] EXT4-fs: Ignoring removed oldalloc option
[  171.401262][ T9666] EXT4-fs: Ignoring removed bh option
[  171.405399][   T10] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[  171.408683][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.415533][ T9666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002]
[  171.416105][   T10] usb 1-1: config 0 has no interface number 0
[  171.418782][ T9666] System zones: 
[  171.425085][   T10] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  171.427520][ T9666] 1-12
[  171.430846][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.432063][ T9666] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1400: corrupted in-inode xattr: e_value size too large
[  171.434019][   T10] usb 1-1: Product: syz
[  171.440398][ T9666] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1400: couldn't read orphan inode 15 (err -117)
[  171.442830][   T10] usb 1-1: Manufacturer: syz
[  171.447384][ T9666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.448327][   T10] usb 1-1: SerialNumber: syz
[  171.456746][   T10] usb 1-1: config 0 descriptor??
[  171.477972][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.508737][ T9669] loop2: detected capacity change from 0 to 512
[  171.517284][ T9669] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  171.656644][ T9669] block device autoloading is deprecated and will be removed.
[  171.660954][ T9669] EXT4-fs (loop2): external journal has bad superblock
[  171.675259][   T10] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22
[  171.688625][   T10] usb 1-1: USB disconnect, device number 21
[  171.865934][ T9671] loop2: detected capacity change from 0 to 32768
[  171.889051][ T9671] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  171.902663][ T9671] XFS (loop2): Ending clean mount
[  171.931682][ T5853] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  172.241213][ T9692] loop0: detected capacity change from 0 to 4096
[  172.274770][   T33] audit: type=1800 audit(1756214392.673:69): pid=9692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1408" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=33 res=0 errno=0
[  172.294438][ T9694] loop2: detected capacity change from 0 to 1024
[  172.303142][ T9694] EXT4-fs: Ignoring removed nomblk_io_submit option
[  172.356144][ T9694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.377048][ T9694] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.1409: reserved inode found cleared - inode=18
[  172.408870][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.729746][ T8223] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  172.879699][ T8223] usb 3-1: Using ep0 maxpacket: 32
[  172.883615][ T8223] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  172.887668][ T8223] usb 3-1: config 0 has no interface number 0
[  172.890729][ T8223] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  172.895575][ T8223] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  172.902942][ T8223] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  172.906556][ T8223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.910435][ T8223] usb 3-1: Product: syz
[  172.912869][ T8223] usb 3-1: Manufacturer: syz
[  172.915521][ T8223] usb 3-1: SerialNumber: syz
[  172.921033][ T8223] usb 3-1: config 0 descriptor??
[  172.925461][ T8223] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  173.135190][ T8223] usb 3-1: qt2_setup_urbs - submit read urb failed -90
[  173.137686][ T8223] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90
[  173.344524][ T8223] usb 3-1: USB disconnect, device number 16
[  173.663744][ T9731] loop0: detected capacity change from 0 to 256
[  173.678199][ T9731] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  173.776664][   T10] IPVS: starting estimator thread 0...
[  173.832069][ T9748] netlink: 'syz.1.1432': attribute type 5 has an invalid length.
[  173.869599][ T9742] IPVS: using max 92 ests per chain, 220800 per kthread
[  173.949164][ T9757] loop2: detected capacity change from 0 to 512
[  173.952225][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1435'.
[  173.955024][ T9757] ext4: Unknown parameter 'rootcontext'
[  175.567032][ T5312] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  175.612970][ T9790] loop7: detected capacity change from 0 to 524255232
[  175.722873][ T9786] loop0: detected capacity change from 0 to 40427
[  175.752805][ T9786] F2FS-fs (loop0): invalid crc value
[  175.759537][ T5312] usb 3-1: Using ep0 maxpacket: 16
[  175.775522][ T5312] usb 3-1: config 0 has an invalid interface number: 249 but max is 0
[  175.780348][ T5312] usb 3-1: config 0 has no interface number 0
[  175.782868][ T5312] usb 3-1: config 0 interface 249 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64
[  175.786810][ T5312] usb 3-1: config 0 interface 249 has no altsetting 0
[  175.791464][ T9786] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  175.795565][ T9786] F2FS-fs (loop0): Start checkpoint disabled!
[  175.795808][ T5312] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1
[  175.802543][ T5312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.803806][ T9786] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  175.805940][ T5312] usb 3-1: Product: syz
[  175.811755][ T5312] usb 3-1: Manufacturer: syz
[  175.813274][ T5312] usb 3-1: SerialNumber: syz
[  175.816160][ T5312] usb 3-1: config 0 descriptor??
[  175.820633][ T9776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  175.825120][ T5312] aircable 3-1:0.249: aircable converter detected
[  175.841440][ T5312] usb 3-1: aircable converter now attached to ttyUSB0
[  176.096662][ T9807] overlay: ./file0 is not a directory
[  176.210815][ T9807] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  176.361593][   T10] usb 3-1: USB disconnect, device number 17
[  176.371380][   T10] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0
[  176.380038][   T10] aircable 3-1:0.249: device disconnected
[  176.530045][  T580] kworker/u9:3: attempt to access beyond end of device
[  176.530045][  T580] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  176.536753][  T580] CPU: 0 UID: 0 PID: 580 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  176.536774][  T580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.536785][  T580] Workqueue: writeback wb_workfn (flush-7:0)
[  176.536810][  T580] Call Trace:
[  176.536816][  T580]  <TASK>
[  176.536823][  T580]  dump_stack_lvl+0x189/0x250
[  176.536843][  T580]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.536858][  T580]  ? __pfx_queue_work_on+0x10/0x10
[  176.536873][  T580]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.536891][  T580]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.536912][  T580]  f2fs_handle_critical_error+0x37c/0x540
[  176.536935][  T580]  f2fs_write_end_io+0x886/0xb60
[  176.536955][  T580]  __submit_merged_bio+0x27a/0x6a0
[  176.536975][  T580]  __submit_merged_write_cond+0x255/0x530
[  176.536995][  T580]  f2fs_write_data_pages+0x261d/0x3000
[  176.537027][  T580]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.537072][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.537086][  T580]  ? lock_release+0x4b/0x3e0
[  176.537111][  T580]  ? f2fs_write_meta_pages+0x357/0x450
[  176.537132][  T580]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.537152][  T580]  do_writepages+0x32e/0x550
[  176.537177][  T580]  __writeback_single_inode+0x145/0xff0
[  176.537195][  T580]  ? do_raw_spin_unlock+0x4d/0x240
[  176.537213][  T580]  writeback_sb_inodes+0x6c7/0x1010
[  176.537240][  T580]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  176.537269][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.537287][  T580]  wb_writeback+0x43b/0xaf0
[  176.537305][  T580]  ? queue_io+0x301/0x590
[  176.537360][  T580]  ? __pfx_wb_writeback+0x10/0x10
[  176.537379][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.537394][  T580]  wb_workfn+0x409/0xef0
[  176.537412][  T580]  ? __pfx_wb_workfn+0x10/0x10
[  176.537426][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.537438][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.537454][  T580]  ? process_scheduled_works+0x9ef/0x17b0
[  176.537468][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.537481][  T580]  ? lock_acquire+0x5f/0x360
[  176.537502][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.537522][  T580]  ? process_scheduled_works+0x9ef/0x17b0
[  176.537534][  T580]  ? process_scheduled_works+0x9ef/0x17b0
[  176.537548][  T580]  process_scheduled_works+0xae1/0x17b0
[  176.537571][  T580]  ? __pfx_process_scheduled_works+0x10/0x10
[  176.537591][  T580]  worker_thread+0x8a0/0xda0
[  176.537607][  T580]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.537627][  T580]  ? __kthread_parkme+0x7b/0x200
[  176.537646][  T580]  kthread+0x711/0x8a0
[  176.537663][  T580]  ? __pfx_worker_thread+0x10/0x10
[  176.537676][  T580]  ? __pfx_kthread+0x10/0x10
[  176.537692][  T580]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.537708][  T580]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.537726][  T580]  ? __pfx_kthread+0x10/0x10
[  176.537742][  T580]  ret_from_fork+0x3fc/0x770
[  176.537758][  T580]  ? __pfx_ret_from_fork+0x10/0x10
[  176.537774][  T580]  ? __switch_to_asm+0x39/0x70
[  176.537791][  T580]  ? __switch_to_asm+0x33/0x70
[  176.537806][  T580]  ? __pfx_kthread+0x10/0x10
[  176.537822][  T580]  ret_from_fork_asm+0x1a/0x30
[  176.537845][  T580]  </TASK>
[  176.537853][  T580] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  176.665264][ T5312] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  176.666820][  T580] CPU: 1 UID: 0 PID: 580 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  176.666833][  T580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.666839][  T580] Workqueue: writeback wb_workfn (flush-7:0)
[  176.666854][  T580] Call Trace:
[  176.666858][  T580]  <TASK>
[  176.666863][  T580]  dump_stack_lvl+0x189/0x250
[  176.666875][  T580]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.666883][  T580]  ? __pfx_queue_work_on+0x10/0x10
[  176.666892][  T580]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.666902][  T580]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.666913][  T580]  f2fs_handle_critical_error+0x37c/0x540
[  176.666926][  T580]  f2fs_write_end_io+0x886/0xb60
[  176.666936][  T580]  __submit_merged_bio+0x27a/0x6a0
[  176.666946][  T580]  __submit_merged_write_cond+0x255/0x530
[  176.666957][  T580]  f2fs_write_data_pages+0x261d/0x3000
[  176.666974][  T580]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.666997][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.667005][  T580]  ? lock_release+0x4b/0x3e0
[  176.667019][  T580]  ? f2fs_write_meta_pages+0x357/0x450
[  176.667030][  T580]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.667040][  T580]  do_writepages+0x32e/0x550
[  176.667053][  T580]  __writeback_single_inode+0x145/0xff0
[  176.667063][  T580]  ? do_raw_spin_unlock+0x4d/0x240
[  176.667073][  T580]  writeback_sb_inodes+0x6c7/0x1010
[  176.667085][  T580]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  176.667101][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.667109][  T580]  wb_writeback+0x43b/0xaf0
[  176.667119][  T580]  ? queue_io+0x301/0x590
[  176.667128][  T580]  ? __pfx_wb_writeback+0x10/0x10
[  176.667138][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.667145][  T580]  wb_workfn+0x409/0xef0
[  176.667154][  T580]  ? __pfx_wb_workfn+0x10/0x10
[  176.667161][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.667168][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.667176][  T580]  ? process_scheduled_works+0x9ef/0x17b0
[  176.667183][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.667189][  T580]  ? lock_acquire+0x5f/0x360
[  176.667200][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.667206][  T580]  ? process_scheduled_works+0x9ef/0x17b0
[  176.667213][  T580]  ? process_scheduled_works+0x9ef/0x17b0
[  176.667219][  T580]  process_scheduled_works+0xae1/0x17b0
[  176.667231][  T580]  ? __pfx_process_scheduled_works+0x10/0x10
[  176.667240][  T580]  worker_thread+0x8a0/0xda0
[  176.667248][  T580]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.667258][  T580]  ? __kthread_parkme+0x7b/0x200
[  176.667268][  T580]  kthread+0x711/0x8a0
[  176.667276][  T580]  ? __pfx_worker_thread+0x10/0x10
[  176.667326][  T580]  ? __pfx_kthread+0x10/0x10
[  176.667334][  T580]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.667343][  T580]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.667353][  T580]  ? __pfx_kthread+0x10/0x10
[  176.667362][  T580]  ret_from_fork+0x3fc/0x770
[  176.667371][  T580]  ? __pfx_ret_from_fork+0x10/0x10
[  176.667379][  T580]  ? __switch_to_asm+0x39/0x70
[  176.667388][  T580]  ? __switch_to_asm+0x33/0x70
[  176.667397][  T580]  ? __pfx_kthread+0x10/0x10
[  176.667406][  T580]  ret_from_fork_asm+0x1a/0x30
[  176.667417][  T580]  </TASK>
[  176.667421][  T580] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  176.787681][  T580] CPU: 1 UID: 0 PID: 580 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  176.787699][  T580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.787705][  T580] Workqueue: writeback wb_workfn (flush-7:0)
[  176.787721][  T580] Call Trace:
[  176.787725][  T580]  <TASK>
[  176.787729][  T580]  dump_stack_lvl+0x189/0x250
[  176.787741][  T580]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.787750][  T580]  ? __pfx_queue_work_on+0x10/0x10
[  176.787758][  T580]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.787769][  T580]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.787781][  T580]  f2fs_handle_critical_error+0x37c/0x540
[  176.787793][  T580]  f2fs_write_end_io+0x886/0xb60
[  176.787804][  T580]  __submit_merged_bio+0x27a/0x6a0
[  176.787815][  T580]  __submit_merged_write_cond+0x255/0x530
[  176.787826][  T580]  f2fs_write_data_pages+0x261d/0x3000
[  176.787843][  T580]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.787870][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.787878][  T580]  ? lock_release+0x4b/0x3e0
[  176.787892][  T580]  ? f2fs_write_meta_pages+0x357/0x450
[  176.787903][  T580]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.787914][  T580]  do_writepages+0x32e/0x550
[  176.787928][  T580]  __writeback_single_inode+0x145/0xff0
[  176.787937][  T580]  ? do_raw_spin_unlock+0x4d/0x240
[  176.787947][  T580]  writeback_sb_inodes+0x6c7/0x1010
[  176.787962][  T580]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  176.787980][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.787988][  T580]  wb_writeback+0x43b/0xaf0
[  176.787999][  T580]  ? queue_io+0x301/0x590
[  176.788008][  T580]  ? __pfx_wb_writeback+0x10/0x10
[  176.788018][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.788026][  T580]  wb_workfn+0x409/0xef0
[  176.788036][  T580]  ? __pfx_wb_workfn+0x10/0x10
[  176.788043][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.788050][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.788058][  T580]  ? process_scheduled_works+0x9ef/0x17b0
[  176.788065][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.788072][  T580]  ? lock_acquire+0x5f/0x360
[  176.788083][  T580]  ? rcu_is_watching+0x15/0xb0
[  176.788111][  T580]  ? process_scheduled_works+0x9ef/0x17b0
[  176.788118][  T580]  ? process_scheduled_works+0x9ef/0x17b0
[  176.788125][  T580]  process_scheduled_works+0xae1/0x17b0
[  176.788138][  T580]  ? __pfx_process_scheduled_works+0x10/0x10
[  176.788148][  T580]  worker_thread+0x8a0/0xda0
[  176.788156][  T580]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.788167][  T580]  ? __kthread_parkme+0x7b/0x200
[  176.788177][  T580]  kthread+0x711/0x8a0
[  176.788186][  T580]  ? __pfx_worker_thread+0x10/0x10
[  176.788193][  T580]  ? __pfx_kthread+0x10/0x10
[  176.788201][  T580]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.788210][  T580]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.788220][  T580]  ? __pfx_kthread+0x10/0x10
[  176.788229][  T580]  ret_from_fork+0x3fc/0x770
[  176.788238][  T580]  ? __pfx_ret_from_fork+0x10/0x10
[  176.788247][  T580]  ? __switch_to_asm+0x39/0x70
[  176.788256][  T580]  ? __switch_to_asm+0x33/0x70
[  176.788270][  T580]  ? __pfx_kthread+0x10/0x10
[  176.788307][  T580]  ret_from_fork_asm+0x1a/0x30
[  176.788322][  T580]  </TASK>
[  176.788326][  T580] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  176.819640][ T5312] usb 2-1: Using ep0 maxpacket: 8
[  176.913042][ T5312] usb 2-1: config 162 has an invalid interface number: 97 but max is 0
[  176.916401][ T5312] usb 2-1: config 162 has no interface number 0
[  176.918707][ T5312] usb 2-1: config 162 interface 97 has no altsetting 0
[  176.923046][ T5312] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  176.925890][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.926245][ T9810] loop2: detected capacity change from 0 to 1024
[  176.928573][ T5312] usb 2-1: Product: syz
[  176.928592][ T5312] usb 2-1: Manufacturer: syz
[  176.928603][ T5312] usb 2-1: SerialNumber: syz
[  176.936729][ T9810] EXT4-fs: inline encryption not supported
[  176.942611][ T9810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.144282][ T5312] metro_usb 2-1:162.97: interrupt-out endpoint missing
[  177.158684][ T5312] usb 2-1: USB disconnect, device number 22
[  177.806497][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.117623][ T9827] loop1: detected capacity change from 0 to 512
[  178.122532][ T9827] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  178.129062][ T9827] EXT4-fs (loop1): 1 truncate cleaned up
[  178.131467][ T9827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.219640][ T8223] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  178.250516][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.369952][ T8223] usb 3-1: Using ep0 maxpacket: 32
[  178.373024][ T8223] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  178.375767][ T8223] usb 3-1: config 0 has no interface number 0
[  178.377708][ T8223] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  178.382805][ T9846] loop1: detected capacity change from 0 to 1024
[  178.393615][ T8223] usb 3-1: config 0 interface 85 has no altsetting 0
[  178.404415][ T8223] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  178.409802][ T8223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.418138][ T8223] usb 3-1: Product: syz
[  178.428469][ T8223] usb 3-1: Manufacturer: syz
[  178.431535][ T8223] usb 3-1: SerialNumber: syz
[  178.440084][ T8223] usb 3-1: config 0 descriptor??
[  179.240414][ T8223] appletouch 3-1:0.85: Geyser mode initialized.
[  179.243562][ T8223] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input13
[  179.381301][ T5889] usb 3-1: USB disconnect, device number 18
[  179.394617][ T5889] appletouch 3-1:0.85: input: appletouch disconnected
[  179.441575][ T9870] loop1: detected capacity change from 0 to 4096
[  179.445652][ T9870] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  179.458200][ T9870] ntfs3(loop1): ino=19, mi_enum_attr
[  179.461935][ T9870] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  179.471283][   T33] audit: type=1804 audit(1756214399.873:70): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1482" name="/newroot/477/file0/file0" dev="loop1" ino=0 res=1 errno=0
[  179.879970][ T8223] usb 2-1: new low-speed USB device number 23 using dummy_hcd
[  180.060301][ T8223] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  180.063256][ T8223] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  180.067414][ T8223] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  180.072521][ T8223] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  180.076839][ T8223] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  180.082610][ T8223] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  180.085509][ T8223] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  180.090268][ T8223] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  180.094961][ T8223] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  180.099283][ T8223] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  180.105124][ T8223] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  180.108651][ T8223] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  180.275033][ T5889] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  180.360959][ T8223] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  180.365390][ T8223] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  180.369999][ T8223] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  180.391801][ T8223] usb 2-1: string descriptor 0 read error: -22
[  180.394445][ T8223] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  180.397949][ T8223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.409916][ T8223] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  180.471559][ T5889] usb 1-1: config 0 has an invalid interface number: 57 but max is 0
[  180.475084][ T5889] usb 1-1: config 0 has no interface number 0
[  180.477722][ T5889] usb 1-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63
[  180.481512][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.486352][ T5889] usb 1-1: config 0 descriptor??
[  180.493385][ T5889] gspca_main: mr97310a-2.14.0 probing 093a:010f
[  180.499243][ T5889] gspca_mr97310a: reg write [21] error -22
[  180.504193][ T5889] mr97310a 1-1:0.57: probe with driver mr97310a failed with error -22
[  180.675629][ T5889] usb 2-1: USB disconnect, device number 23
[  180.701789][ T5312] usb 1-1: USB disconnect, device number 22
[  180.919367][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'.
[  181.774147][ T9921] loop1: detected capacity change from 0 to 1024
[  181.947650][ T9925] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  182.399107][ T9938] lo speed is unknown, defaulting to 1000
[  182.401178][ T9938] lo speed is unknown, defaulting to 1000
[  182.404168][ T9938] lo speed is unknown, defaulting to 1000
[  182.420900][ T9938] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  182.446758][ T9938] lo speed is unknown, defaulting to 1000
[  182.451285][ T9938] lo speed is unknown, defaulting to 1000
[  182.456604][ T9938] lo speed is unknown, defaulting to 1000
[  182.579082][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'.
[  182.925611][ T9963] loop1: detected capacity change from 0 to 32768
[  182.934455][ T9963] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1522 (9963)
[  182.949077][ T9963] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.953588][ T9963] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  183.065247][ T9963] BTRFS info (device loop1): enabling ssd optimizations
[  183.082054][ T9963] BTRFS info (device loop1): using spread ssd allocation scheme
[  183.087072][ T9963] BTRFS info (device loop1): enabling free space tree
[  183.184430][ T5845] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.409781][ T5889] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  183.510882][T10008] loop1: detected capacity change from 0 to 2048
[  183.606919][ T5889] usb 3-1: not running at top speed; connect to a high speed hub
[  183.615785][ T5889] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  183.626329][ T5889] usb 3-1: config 1 has no interface number 1
[  183.629328][ T5889] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  183.652677][ T5889] usb 3-1: string descriptor 0 read error: -22
[  183.655500][ T5889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  183.659273][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.691707][ T5889] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc
[  183.796168][T10009] delete_channel: no stack
[  183.930498][ T5889] usb 3-1: USB disconnect, device number 19
[  184.270369][T10018] netlink: 'syz.1.1541': attribute type 6 has an invalid length.
[  184.274904][T10018] netlink: 'syz.1.1541': attribute type 6 has an invalid length.
[  185.181956][T10048] loop1: detected capacity change from 0 to 40427
[  185.185202][T10048] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(32769)
[  185.188124][T10048] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  185.194779][T10048] F2FS-fs (loop1): invalid crc value
[  185.231152][T10048] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  185.237030][T10048] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  185.240432][T10048] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  185.275811][ T5845] syz-executor: attempt to access beyond end of device
[  185.275811][ T5845] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  185.281753][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  185.281793][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.281811][ T5845] Call Trace:
[  185.281817][ T5845]  <TASK>
[  185.281824][ T5845]  dump_stack_lvl+0x189/0x250
[  185.281848][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.281863][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  185.281878][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  185.281898][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  185.281919][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  185.281942][ T5845]  f2fs_write_end_io+0x886/0xb60
[  185.281963][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  185.281984][ T5845]  __submit_merged_write_cond+0x255/0x530
[  185.282004][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  185.282038][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  185.282075][ T5845]  ? __mod_zone_page_state+0xd7/0x140
[  185.282098][ T5845]  ? folios_put_refs+0x560/0x640
[  185.282117][ T5845]  ? __pfx_folios_put_refs+0x10/0x10
[  185.282139][ T5845]  ? rcu_is_watching+0x15/0xb0
[  185.282154][ T5845]  ? lru_add+0xa2f/0xd80
[  185.282192][ T5845]  ? lru_add+0x198/0xd80
[  185.282207][ T5845]  ? do_raw_spin_lock+0x121/0x290
[  185.282229][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  185.282245][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  185.282266][ T5845]  do_writepages+0x32e/0x550
[  185.282315][ T5845]  ? rcu_is_watching+0x15/0xb0
[  185.282331][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  185.282348][ T5845]  filemap_fdatawrite+0x199/0x240
[  185.282368][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  185.282400][ T5845]  ? rcu_is_watching+0x15/0xb0
[  185.282414][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  185.282432][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  185.282452][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[  185.282476][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  185.282508][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  185.282525][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  185.282540][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  185.282552][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  185.282574][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  185.282589][ T5845]  deactivate_locked_super+0xbc/0x130
[  185.282604][ T5845]  cleanup_mnt+0x425/0x4c0
[  185.282621][ T5845]  task_work_run+0x1d4/0x260
[  185.282640][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  185.282653][ T5845]  ? __x64_sys_umount+0x122/0x160
[  185.282667][ T5845]  ? __pfx___x64_sys_umount+0x10/0x10
[  185.282683][ T5845]  ? rcu_is_watching+0x15/0xb0
[  185.282697][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  185.282716][ T5845]  do_syscall_64+0x2bd/0x3b0
[  185.282737][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.282751][ T5845]  ? exc_page_fault+0x9f/0xf0
[  185.282768][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.282782][ T5845] RIP: 0033:0x7fdf6618ff17
[  185.282796][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  185.282809][ T5845] RSP: 002b:00007fffacf5c408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  185.282827][ T5845] RAX: 0000000000000000 RBX: 00007fdf66211c05 RCX: 00007fdf6618ff17
[  185.282837][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffacf5c4c0
[  185.282846][ T5845] RBP: 00007fffacf5c4c0 R08: 0000000000000000 R09: 0000000000000000
[  185.282855][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffacf5d550
[  185.282865][ T5845] R13: 00007fdf66211c05 R14: 000000000002d507 R15: 00007fffacf5d590
[  185.282882][ T5845]  </TASK>
[  185.285173][ T5845] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  185.327264][T10070] team0: Device gtp0 is of different type
[  185.521749][T10072] loop0: detected capacity change from 0 to 4096
[  185.551863][T10073] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.613930][T10077] loop1: detected capacity change from 0 to 512
[  185.635652][T10079] loop0: detected capacity change from 0 to 2048
[  185.654403][T10079] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.659966][T10077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.670633][T10077] ext4 filesystem being mounted at /515/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  186.297722][T10075] loop2: detected capacity change from 0 to 65536
[  186.333052][T10075] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  186.380891][T10075] XFS (loop2): Ending clean mount
[  186.536748][ T5853] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  186.782351][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.892140][T10115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1574'.
[  186.927300][T10117] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  186.951446][T10120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1581'.
[  187.023963][   T33] audit: type=1326 audit(1756214407.423:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.2.1585" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cccd8ebe9 code=0x0
[  187.031763][T10128] loop0: detected capacity change from 0 to 512
[  187.035165][T10128] EXT4-fs: Ignoring removed oldalloc option
[  187.052860][T10128] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.1584: Parent and EA inode have the same ino 15
[  187.066688][T10128] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  187.072872][T10128] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.1584: Parent and EA inode have the same ino 15
[  187.078317][T10128] EXT4-fs (loop0): 1 orphan inode deleted
[  187.082402][T10128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.093419][T10128] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.1584: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  187.119369][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.256122][T10132] loop0: detected capacity change from 0 to 32768
[  187.265747][T10132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1586 (10132)
[  187.274178][T10132] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.278122][T10132] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  187.291573][T10132] BTRFS info (device loop0): enabling ssd optimizations
[  187.293889][T10132] BTRFS info (device loop0): enabling free space tree
[  187.323759][ T5844] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.659580][ T8223] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  187.813896][ T8223] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  187.817143][ T8223] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  187.822537][ T8223] usb 1-1: Product: syz
[  187.824061][ T8223] usb 1-1: Manufacturer: syz
[  187.825539][ T8223] usb 1-1: SerialNumber: syz
[  187.828569][ T8223] usb 1-1: config 0 descriptor??
[  187.835779][ T8223] ch341 1-1:0.0: ch341-uart converter detected
[  187.893088][T10160] loop2: detected capacity change from 0 to 512
[  187.915443][T10160] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1592: casefold flag without casefold feature
[  187.924967][T10160] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1592: couldn't read orphan inode 15 (err -117)
[  187.935592][T10160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.984921][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.024796][T10164] loop1: detected capacity change from 0 to 512
[  188.049718][T10164] EXT4-fs: Ignoring removed nobh option
[  188.059984][T10164] EXT4-fs (loop1): Test dummy encryption mode enabled
[  188.071925][T10164] EXT4-fs error (device loop1): __ext4_iget:5464: inode #11: block 1: comm syz.1.1593: invalid block
[  188.077898][T10164] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1593: couldn't read orphan inode 11 (err -117)
[  188.083208][T10164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.093914][T10169] IPv6: sit2: Disabled Multicast RS
[  188.096250][T10169] sit2: entered allmulticast mode
[  188.147505][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.266105][T10175] loop1: detected capacity change from 0 to 512
[  188.269795][T10175] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  188.382375][T10182] loop1: detected capacity change from 0 to 128
[  188.394605][T10182] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  188.398909][T10182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.849716][   T51] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  188.863256][ T8223] ch341-uart ttyUSB0: break control not supported, using simulated break
[  188.867555][ T8223] usb 1-1: ch341-uart converter now attached to ttyUSB0
[  188.872360][ T8223] usb 1-1: USB disconnect, device number 23
[  188.875954][ T8223] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  188.879214][ T8223] ch341 1-1:0.0: device disconnected
[  189.001138][   T51] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  189.004149][   T51] usb 3-1: config 0 has no interface number 0
[  189.008195][   T51] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  189.011961][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.014701][   T51] usb 3-1: Product: syz
[  189.016108][   T51] usb 3-1: Manufacturer: syz
[  189.018100][   T51] usb 3-1: SerialNumber: syz
[  189.021259][   T51] usb 3-1: config 0 descriptor??
[  189.271247][T10185] [U] 
[  189.428370][   T51] usb 3-1: Firmware: major: 84, minor: 103, hardware type: UNKNOWN (73)
[  189.450590][T10196] netlink: 'syz.0.1606': attribute type 10 has an invalid length.
[  189.454779][T10196] team0: Device hsr_slave_0 failed to register rx_handler
[  189.590254][T10202] loop0: detected capacity change from 0 to 4096
[  189.614278][   T33] audit: type=1800 audit(1756214410.013:72): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1609" name="file1" dev="loop0" ino=33 res=0 errno=0
[  189.631711][   T51] usb 3-1: Read permanent extended address 52:39:35:8d:79:3e:bf:c5 from device
[  189.636587][T10194] loop1: detected capacity change from 0 to 32768
[  189.640802][   T51] usb 3-1: atusb_probe: initialization failed, error = -524
[  189.643216][   T51] atusb 3-1:0.128: probe with driver atusb failed with error -524
[  189.836391][ T5889] usb 3-1: USB disconnect, device number 20
[  189.929912][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'.
[  189.962426][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1616'.
[  190.054002][T10221] loop0: detected capacity change from 0 to 64
[  190.111486][T10223] loop0: detected capacity change from 0 to 8192
[  190.114958][T10223] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  190.390599][T10226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.394130][T10226] syzkaller0: entered promiscuous mode
[  190.396456][T10226] syzkaller0: entered allmulticast mode
[  190.407087][T10226] tipc: Resetting bearer <eth:syzkaller0>
[  190.412021][T10225] tipc: Resetting bearer <eth:syzkaller0>
[  190.420986][T10225] tipc: Disabling bearer <eth:syzkaller0>
[  190.523732][T10228] loop2: detected capacity change from 0 to 256
[  190.535348][T10228] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  190.730480][T10238] overlayfs: failed to resolve './file1': -2
[  191.916658][T10244] loop2: detected capacity change from 0 to 4096
[  191.971351][T10255] loop2: detected capacity change from 0 to 1024
[  192.026703][T10260] loop2: detected capacity change from 0 to 764
[  192.036816][T10260] Symlink component flag not implemented
[  192.039074][T10260] Symlink component flag not implemented
[  192.046592][T10260] Symlink component flag not implemented (128)
[  192.051869][T10260] Symlink component flag not implemented (122)
[  192.111120][T10267] loop1: detected capacity change from 0 to 16
[  192.114777][T10267] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 145700)
[  192.242767][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'.
[  192.249919][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'.
[  192.420055][T10300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.003006][   T33] audit: type=1326 audit(1756214413.403:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.2.1658" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cccd8ebe9 code=0x0
[  193.090438][T10321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1660'.
[  193.367702][T10328] capability: warning: `syz.0.1663' uses 32-bit capabilities (legacy support in use)
[  193.481929][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'.
[  193.870148][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.475572][T10368] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  194.672364][T10372] bond0: Unable to set down delay as MII monitoring is disabled
[  194.692049][ T5889] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  194.851940][ T5889] usb 2-1: config 0 has no interfaces?
[  194.854208][ T5889] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  194.858088][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.867618][ T5889] usb 2-1: config 0 descriptor??
[  195.757308][T10387] loop2: detected capacity change from 0 to 8
[  195.768932][T10387] SQUASHFS error: xz decompression failed, data probably corrupt
[  195.772696][T10387] SQUASHFS error: Failed to read block 0x108: -5
[  195.776818][T10387] SQUASHFS error: Unable to read metadata cache entry [106]
[  195.780004][T10387] SQUASHFS error: Unable to read inode 0x11f
[  195.853961][T10393] bridge0: entered promiscuous mode
[  195.863901][T10393] team0: entered promiscuous mode
[  195.865915][T10393] team_slave_0: entered promiscuous mode
[  195.868218][T10393] team_slave_1: entered promiscuous mode
[  195.878356][T10393] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  195.882797][T10393] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  195.886797][T10393] hsr1: entered allmulticast mode
[  195.888814][T10393] bridge0: entered allmulticast mode
[  195.892189][T10393] team0: entered allmulticast mode
[  195.893915][T10393] team_slave_0: entered allmulticast mode
[  195.895733][T10393] team_slave_1: entered allmulticast mode
[  195.913062][T10397] sit0: entered promiscuous mode
[  195.924510][T10397] netlink: 'syz.0.1695': attribute type 1 has an invalid length.
[  195.928721][T10397] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1695'.
[  196.086426][T10415] loop0: detected capacity change from 0 to 512
[  196.166293][T10421] tmpfs: Bad value for 'mpol'
[  196.313353][T10417] loop2: detected capacity change from 0 to 40427
[  196.361351][T10417] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  196.365104][T10417] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  196.384457][ T5853] syz-executor: attempt to access beyond end of device
[  196.384457][ T5853] loop2: rw=2051, sector=77824, nr_sectors = 8 limit=40427
[  196.391740][ T5853] F2FS-fs (loop2): Issue discard(9728, 9728, 1) failed, ret: -5
[  197.122063][T10443] loop2: detected capacity change from 0 to 40427
[  197.127836][T10443] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  197.141107][T10443] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  197.149139][T10443] F2FS-fs (loop2): invalid crc value
[  197.186759][T10443] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  197.192255][T10443] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  197.196645][T10443] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  197.442509][ T8223] usb 2-1: USB disconnect, device number 24
[  197.459621][   T51] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  197.609705][   T51] usb 1-1: Using ep0 maxpacket: 32
[  197.614822][   T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.623136][   T51] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  197.626945][   T51] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  197.636317][   T51] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  197.640573][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.643117][   T51] usb 1-1: Product: syz
[  197.644437][   T51] usb 1-1: Manufacturer: syz
[  197.645952][   T51] usb 1-1: SerialNumber: syz
[  197.651502][   T51] cdc_ncm 1-1:1.0: skipping garbage
[  197.653717][   T51] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  197.656453][   T51] cdc_ncm 1-1:1.0: bind() failure
[  197.769666][ T5888] usb 3-1: new low-speed USB device number 21 using dummy_hcd
[  197.856982][   T51] usb 1-1: USB disconnect, device number 24
[  197.859858][ T5889] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  197.921369][ T5888] usb 3-1: No LPM exit latency info found, disabling LPM.
[  197.924436][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  197.928486][ T5888] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  197.932200][ T5888] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  197.938791][ T5888] usb 3-1: string descriptor 0 read error: -22
[  197.941826][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  197.944835][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.951367][T10467] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  198.019604][ T5889] usb 2-1: Using ep0 maxpacket: 32
[  198.023843][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short
[  198.027852][ T5889] usb 2-1: config 117 has an invalid interface number: 249 but max is 0
[  198.031714][ T5889] usb 2-1: config 117 has no interface number 0
[  198.034251][ T5889] usb 2-1: config 117 interface 249 altsetting 99 endpoint 0xF has an invalid bInterval 0, changing to 7
[  198.038694][ T5889] usb 2-1: config 117 interface 249 altsetting 99 endpoint 0xF has invalid maxpacket 42073, setting to 1024
[  198.043671][ T5889] usb 2-1: config 117 interface 249 has no altsetting 0
[  198.048125][ T5889] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=d5.d1
[  198.052153][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.054944][ T5889] usb 2-1: Product: syz
[  198.057267][ T5889] usb 2-1: Manufacturer: syz
[  198.059221][ T5889] usb 2-1: SerialNumber: syz
[  198.064708][T10473] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  198.161967][ T5888] cdc_ncm 3-1:1.0: bind() failure
[  198.165426][ T5888] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  198.167581][ T5888] cdc_ncm 3-1:1.1: bind() failure
[  198.172189][ T5888] usb 3-1: USB disconnect, device number 21
[  198.277088][ T5889] ati_remote 2-1:117.249: ati_remote_probe: Unexpected endpoint_in
[  198.283206][ T5889] usb 2-1: USB disconnect, device number 25
[  198.570684][T10477] loop0: detected capacity change from 0 to 32768
[  198.575910][T10477] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1730 (10477)
[  198.591255][T10477] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  198.595209][T10477] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  198.619140][T10477] BTRFS info (device loop0): enabling ssd optimizations
[  198.622598][T10477] BTRFS info (device loop0): enabling free space tree
[  198.625084][T10477] BTRFS info (device loop0): use zstd compression, level 3
[  198.647178][   T33] audit: type=1800 audit(1756214419.043:74): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1730" name="file1" dev="loop0" ino=260 res=0 errno=0
[  198.691586][ T5844] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  198.711061][T10495] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1732'.
[  198.824165][ T5889] IPVS: starting estimator thread 0...
[  198.909793][T10503] IPVS: using max 70 ests per chain, 168000 per kthread
[  199.031056][T10506] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4.
[  199.407280][T10523] binder: 10522:10523 ioctl c0306201 0 returned -14
[  199.606942][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'.
[  199.645859][T10541] loop0: detected capacity change from 0 to 1024
[  199.649266][T10541] EXT4-fs: Ignoring removed nobh option
[  199.651984][T10541] EXT4-fs: Ignoring removed bh option
[  199.668798][T10541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.698419][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.759069][T10548] loop0: detected capacity change from 0 to 512
[  199.773924][T10548] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  199.802838][T10548] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  199.805763][T10548] System zones: 0-2, 18-18, 34-34
[  199.808340][T10548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.813562][T10548] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.861224][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.119636][ T5888] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  200.250437][T10556] syzkaller1: entered promiscuous mode
[  200.252757][T10556] syzkaller1: entered allmulticast mode
[  200.272568][ T5888] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  200.275883][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.280601][ T5888] usb 1-1: config 0 has no interface number 0
[  200.283921][ T5888] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255
[  200.289744][ T5888] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  200.301680][ T5888] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  200.305475][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.308956][ T5888] usb 1-1: Product: syz
[  200.311320][ T5888] usb 1-1: Manufacturer: syz
[  200.313286][ T5888] usb 1-1: SerialNumber: syz
[  200.316988][ T5888] usb 1-1: config 0 descriptor??
[  200.324270][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  200.329101][ T5888] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  200.335941][ T5888] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  200.340013][ T5888] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  200.413004][T10558] block nbd2: NBD_DISCONNECT
[  200.415324][T10558] block nbd2: Disconnected due to user request.
[  200.417936][T10558] block nbd2: shutting down sockets
[  200.469104][T10566] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1759'.
[  200.544918][ T5889] usb 1-1: USB disconnect, device number 25
[  200.554209][ T5889] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  200.557813][ T5889] cyberjack 1-1:0.69: device disconnected
[  200.605196][T10580] loop2: detected capacity change from 0 to 47
[  200.627924][T10582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1767'.
[  200.631136][T10582] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  200.919070][T10594] loop1: detected capacity change from 0 to 32768
[  200.923062][T10594] (syz.1.1773,10594,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  200.928715][T10594] (syz.1.1773,10594,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  200.938543][T10594] JBD2: Ignoring recovery information on journal
[  200.949924][ T5888] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  200.960441][T10594] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  200.991853][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  201.099603][ T5888] usb 3-1: Using ep0 maxpacket: 32
[  201.102816][T10600] loop0: detected capacity change from 0 to 1024
[  201.106751][ T5888] usb 3-1: config 0 has an invalid interface number: 43 but max is 1
[  201.116032][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.124497][ T5888] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  201.128389][ T5888] usb 3-1: config 0 has no interface number 0
[  201.131371][ T5888] usb 3-1: config 0 interface 43 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  201.136465][ T5888] usb 3-1: config 0 interface 43 has no altsetting 0
[  201.142136][ T5888] usb 3-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a
[  201.145807][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.148884][ T5888] usb 3-1: Product: syz
[  201.150992][ T5888] usb 3-1: Manufacturer: syz
[  201.154667][ T5888] usb 3-1: SerialNumber: syz
[  201.163753][ T5888] usb 3-1: config 0 descriptor??
[  201.249940][T10598] loop1: detected capacity change from 0 to 32768
[  201.276643][T10598] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1774 (10598)
[  201.294048][T10598] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  201.299841][T10598] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  201.377792][ T5888] keyspan_pda 3-1:0.43: required endpoints missing
[  201.390118][ T5888] usb 3-1: USB disconnect, device number 22
[  201.416922][T10598] BTRFS info (device loop1): enabling ssd optimizations
[  201.419167][T10598] BTRFS info (device loop1): enabling free space tree
[  201.448549][ T5845] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  201.453766][T10628] loop0: detected capacity change from 0 to 512
[  201.461475][T10628] EXT4-fs: Ignoring removed mblk_io_submit option
[  201.504692][T10628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.510428][T10628] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.557502][T10632] loop1: detected capacity change from 0 to 512
[  201.571924][T10632] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  201.575879][T10632] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  201.580709][T10632] EXT4-fs (loop1): group descriptors corrupted!
[  201.664496][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.946255][T10652] loop2: detected capacity change from 0 to 1024
[  202.066105][ T5889] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  202.240115][ T5889] usb 1-1: Using ep0 maxpacket: 8
[  202.273704][ T5889] usb 1-1: config 6 has an invalid interface number: 51 but max is 1
[  202.278365][ T5889] usb 1-1: config 6 has no interface number 1
[  202.284651][ T5889] usb 1-1: config 6 interface 0 has no altsetting 0
[  202.291841][ T5889] usb 1-1: config 6 interface 51 has no altsetting 0
[  202.302503][ T5889] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad
[  202.310055][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.313381][ T5889] usb 1-1: Product: syz
[  202.315267][ T5889] usb 1-1: Manufacturer: syz
[  202.317440][ T5889] usb 1-1: SerialNumber: syz
[  202.361535][T10660] loop2: detected capacity change from 0 to 2048
[  202.375778][T10660] syz.2.1795: attempt to access beyond end of device
[  202.375778][T10660] loop2: rw=0, sector=562949953421394, nr_sectors = 2 limit=2048
[  202.381840][T10660] NILFS (loop2): I/O error reading meta-data file (ino=5, block-offset=0)
[  202.385545][T10660] NILFS (loop2): error -5 while loading super root
[  202.577416][T10662] loop2: detected capacity change from 0 to 32768
[  202.600466][ T5889] xr_serial 1-1:6.51: xr_serial converter detected
[  202.616765][ T5889] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  202.627338][T10662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  202.627368][T10662]   allowing incompatible features above 0.0: (unknown version)
[  202.627377][T10662]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  202.627388][T10662]   with devices loop2
[  202.646897][T10662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  202.651433][T10662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  202.661142][T10662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  202.665187][ T5889] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  202.670030][T10662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  202.677737][T10662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  202.683237][T10662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  202.688183][T10662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  202.692201][T10662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  202.703621][T10662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  202.752655][ T5889] usb 1-1: USB disconnect, device number 26
[  202.755800][ T5889] xr_serial 1-1:6.0: device disconnected
[  202.816605][ T5853] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  202.823083][ T5853] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  202.826325][ T5853] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  202.841555][ T5853] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[  202.856216][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'.
[  202.866593][ T5853] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3
[  202.872902][ T5853] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4
[  202.877244][ T5853] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  202.897788][ T5853] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  204.435848][T10702] binder: 10701:10702 ioctl c0306201 200000000480 returned -14
[  204.557564][T10708] program syz.1.1812 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  204.640613][T10712] sctp: [Deprecated]: syz.1.1814 (pid 10712) Use of int in max_burst socket option.
[  204.640613][T10712] Use struct sctp_assoc_value instead
[  204.910930][T10730] loop2: detected capacity change from 0 to 256
[  205.523327][T10743] loop2: detected capacity change from 0 to 1024
[  205.528555][T10743] hfsplus: Unknown parameter '000000000000000000000000xffffffffffffffff'
[  205.701332][T10751] loop1: detected capacity change from 0 to 512
[  205.723037][T10751] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1831: corrupted in-inode xattr: invalid ea_ino
[  205.732322][T10751] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1831: couldn't read orphan inode 15 (err -117)
[  205.738132][T10751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.776413][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.858862][T10755] loop1: detected capacity change from 0 to 4096
[  205.866400][T10755] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  206.065481][T10761] tmpfs: Bad value for 'mpol'
[  206.444054][T10767] syz.1.1837: attempt to access beyond end of device
[  206.444054][T10767] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0
[  206.450185][T10767] EXT4-fs (nbd1): unable to read superblock
[  206.647051][T10770] No control pipe specified
[  207.079547][ T5889] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  207.239654][ T5889] usb 3-1: Using ep0 maxpacket: 16
[  207.245141][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.249962][ T5889] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  207.253566][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.258261][ T5889] usb 3-1: config 0 descriptor??
[  207.678018][ T5889] greenasia 0003:0E8F:0012.0008: hidraw0: USB HID v0.05 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0
[  207.687169][ T5889] greenasia 0003:0E8F:0012.0008: no inputs found
[  207.884257][ T5889] usb 3-1: USB disconnect, device number 23
[  208.520848][T10806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1854'.
[  208.742852][T10808] loop2: detected capacity change from 0 to 32768
[  208.746629][T10808] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1853 (10808)
[  208.757922][T10808] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.766899][T10808] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  208.780595][T10827] loop0: detected capacity change from 0 to 1024
[  208.784873][T10827] EXT4-fs: Ignoring removed nomblk_io_submit option
[  208.816968][T10827] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  208.826201][T10827] EXT4-fs (loop0): Test dummy encryption mode enabled
[  208.829117][T10827] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (37511!=20869)
[  208.834654][T10808] BTRFS info (device loop2): enabling ssd optimizations
[  208.837572][T10808] BTRFS info (device loop2): enabling free space tree
[  208.840598][T10827] EXT4-fs (loop0): group descriptors corrupted!
[  208.891444][ T5853] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.948547][T10845] binder: 10844:10845 ioctl c0306201 200000000280 returned -14
[  209.001681][T10847] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1865'.
[  209.109023][T10843] loop0: detected capacity change from 0 to 32768
[  209.139313][ T5844] non-latin1 character 0x2e66 found in JFS file name
[  209.143067][ T5844] mount with iocharset=utf8 to access
[  209.166589][  T116] ------------[ cut here ]------------
[  209.168423][  T116] WARNING: CPU: 1 PID: 116 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x454/0x4e0
[  209.171675][  T116] Modules linked in:
[  209.173696][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  209.178288][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.182774][  T116] RIP: 0010:dbAdjTree+0x454/0x4e0
[  209.186363][  T116] Code: 5a ff ff ff e8 7d 28 81 fe eb 05 e8 76 28 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 53 da 3d 08 cc e8 5d 28 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  209.194603][  T116] RSP: 0018:ffffc900023ef508 EFLAGS: 00010293
[  209.197045][  T116] RAX: ffffffff833e82d3 RBX: ffff888121575010 RCX: ffff88801edc9cc0
[  209.200667][  T116] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  209.203831][  T116] RBP: 0000000000020056 R08: ffffea0004855d47 R09: 1ffffd400090aba8
[  209.207294][  T116] R10: dffffc0000000000 R11: fffff9400090aba9 R12: ffff888121575018
[  209.210811][  T116] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  209.213854][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  209.217241][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  209.220115][  T116] CR2: 00007fff61ec2ff8 CR3: 000000000df36000 CR4: 00000000000006f0
[  209.223128][  T116] Call Trace:
[  209.224405][  T116]  <TASK>
[  209.225577][  T116]  ? __pfx_lock_metapage+0x10/0x10
[  209.227619][  T116]  ? do_raw_spin_lock+0x121/0x290
[  209.230737][  T116]  dbJoin+0x238/0x300
[  209.232700][  T116]  ? do_read_cache_folio+0x4c6/0x590
[  209.234755][  T116]  dbFreeBits+0x4e1/0xdb0
[  209.236444][  T116]  dbFree+0x336/0x650
[  209.238027][  T116]  txFreeMap+0x9e6/0xde0
[  209.240007][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  209.242265][  T116]  xtTruncate+0xcea/0x2e70
[  209.244024][  T116]  ? __pfx_xtTruncate+0x10/0x10
[  209.245966][  T116]  ? do_raw_spin_lock+0x121/0x290
[  209.247870][  T116]  ? __asan_memset+0x22/0x50
[  209.250016][  T116]  ? __dquot_initialize+0x218/0xcb0
[  209.252173][  T116]  jfs_free_zero_link+0x33a/0x4a0
[  209.254184][  T116]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  209.256380][  T116]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  209.258788][  T116]  jfs_evict_inode+0x363/0x440
[  209.260967][  T116]  ? evict+0x4f8/0x9c0
[  209.262569][  T116]  ? __pfx_jfs_evict_inode+0x10/0x10
[  209.264641][  T116]  evict+0x504/0x9c0
[  209.266194][  T116]  ? __pfx_evict+0x10/0x10
[  209.267915][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  209.270307][  T116]  ? _raw_spin_unlock+0x28/0x50
[  209.272247][  T116]  ? iput+0x6d8/0x9d0
[  209.273922][  T116]  jfs_lazycommit+0x43f/0xa90
[  209.275837][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  209.277878][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  209.280411][  T116]  ? __kthread_parkme+0x7b/0x200
[  209.282283][  T116]  ? __kthread_parkme+0x1a1/0x200
[  209.284184][  T116]  kthread+0x711/0x8a0
[  209.285849][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  209.287894][  T116]  ? __pfx_kthread+0x10/0x10
[  209.290604][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.293404][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.295438][  T116]  ? __pfx_kthread+0x10/0x10
[  209.297186][  T116]  ret_from_fork+0x3fc/0x770
[  209.298959][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  209.301520][  T116]  ? __switch_to_asm+0x39/0x70
[  209.303651][  T116]  ? __switch_to_asm+0x33/0x70
[  209.305540][  T116]  ? __pfx_kthread+0x10/0x10
[  209.307321][  T116]  ret_from_fork_asm+0x1a/0x30
[  209.309237][  T116]  </TASK>
[  209.310803][  T116] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  209.313671][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  209.317115][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.321081][  T116] Call Trace:
[  209.322391][  T116]  <TASK>
[  209.323595][  T116]  dump_stack_lvl+0x99/0x250
[  209.325451][  T116]  ? __asan_memcpy+0x40/0x70
[  209.327331][  T116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.329371][  T116]  ? __pfx__printk+0x10/0x10
[  209.331224][  T116]  vpanic+0x281/0x750
[  209.332884][  T116]  ? __pfx__printk+0x10/0x10
[  209.334754][  T116]  ? __pfx_vpanic+0x10/0x10
[  209.336604][  T116]  ? is_bpf_text_address+0x26/0x2b0
[  209.338767][  T116]  panic+0xb9/0xc0
[  209.340302][  T116]  ? __pfx_panic+0x10/0x10
[  209.342059][  T116]  __warn+0x31b/0x4b0
[  209.343699][  T116]  ? dbAdjTree+0x454/0x4e0
[  209.345557][  T116]  ? dbAdjTree+0x454/0x4e0
[  209.347367][  T116]  report_bug+0x2be/0x4f0
[  209.349071][  T116]  ? dbAdjTree+0x454/0x4e0
[  209.350874][  T116]  ? dbAdjTree+0x454/0x4e0
[  209.352691][  T116]  ? dbAdjTree+0x456/0x4e0
[  209.354533][  T116]  handle_bug+0x84/0x160
[  209.356302][  T116]  exc_invalid_op+0x1a/0x50
[  209.358192][  T116]  asm_exc_invalid_op+0x1a/0x20
[  209.360151][  T116] RIP: 0010:dbAdjTree+0x454/0x4e0
[  209.362117][  T116] Code: 5a ff ff ff e8 7d 28 81 fe eb 05 e8 76 28 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 53 da 3d 08 cc e8 5d 28 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  209.369790][  T116] RSP: 0018:ffffc900023ef508 EFLAGS: 00010293
[  209.372198][  T116] RAX: ffffffff833e82d3 RBX: ffff888121575010 RCX: ffff88801edc9cc0
[  209.375284][  T116] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  209.378442][  T116] RBP: 0000000000020056 R08: ffffea0004855d47 R09: 1ffffd400090aba8
[  209.381551][  T116] R10: dffffc0000000000 R11: fffff9400090aba9 R12: ffff888121575018
[  209.384623][  T116] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  209.387767][  T116]  ? dbAdjTree+0x453/0x4e0
[  209.389518][  T116]  ? dbAdjTree+0x453/0x4e0
[  209.391485][  T116]  ? __pfx_lock_metapage+0x10/0x10
[  209.393558][  T116]  ? do_raw_spin_lock+0x121/0x290
[  209.395594][  T116]  dbJoin+0x238/0x300
[  209.397247][  T116]  ? do_read_cache_folio+0x4c6/0x590
[  209.399406][  T116]  dbFreeBits+0x4e1/0xdb0
[  209.401203][  T116]  dbFree+0x336/0x650
[  209.402837][  T116]  txFreeMap+0x9e6/0xde0
[  209.404478][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  209.406564][  T116]  xtTruncate+0xcea/0x2e70
[  209.408353][  T116]  ? __pfx_xtTruncate+0x10/0x10
[  209.410311][  T116]  ? do_raw_spin_lock+0x121/0x290
[  209.412368][  T116]  ? __asan_memset+0x22/0x50
[  209.414248][  T116]  ? __dquot_initialize+0x218/0xcb0
[  209.416354][  T116]  jfs_free_zero_link+0x33a/0x4a0
[  209.418405][  T116]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  209.420689][  T116]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  209.423143][  T116]  jfs_evict_inode+0x363/0x440
[  209.425124][  T116]  ? evict+0x4f8/0x9c0
[  209.426804][  T116]  ? __pfx_jfs_evict_inode+0x10/0x10
[  209.429007][  T116]  evict+0x504/0x9c0
[  209.430668][  T116]  ? __pfx_evict+0x10/0x10
[  209.432489][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  209.434554][  T116]  ? _raw_spin_unlock+0x28/0x50
[  209.436503][  T116]  ? iput+0x6d8/0x9d0
[  209.438062][  T116]  jfs_lazycommit+0x43f/0xa90
[  209.439945][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  209.442033][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  209.444401][  T116]  ? __kthread_parkme+0x7b/0x200
[  209.446393][  T116]  ? __kthread_parkme+0x1a1/0x200
[  209.448477][  T116]  kthread+0x711/0x8a0
[  209.450149][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  209.452254][  T116]  ? __pfx_kthread+0x10/0x10
[  209.454154][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.456277][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.458338][  T116]  ? __pfx_kthread+0x10/0x10
[  209.460137][  T116]  ret_from_fork+0x3fc/0x770
[  209.461994][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  209.464070][  T116]  ? __switch_to_asm+0x39/0x70
[  209.465991][  T116]  ? __switch_to_asm+0x33/0x70
[  209.467927][  T116]  ? __pfx_kthread+0x10/0x10
[  209.469804][  T116]  ret_from_fork_asm+0x1a/0x30
[  209.471780][  T116]  </TASK>
[  209.473707][  T116] Kernel Offset: disabled
[  209.475429][  T116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:16:13  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11022733757 RBX=ffff88811399bab8 RCX=dffffc0000000000 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc90003bcf7e0 RBP=ffff888107fbf490 RSP=ffffc90003bcf860
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000779efc
R12=dffffc0000000000 R13=ffffc90003bcfa90 R14=00000000e3bd6b01 R15=ffffffff823a9e26
RIP=ffffffff823aa089 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8df0cafc80 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555574567808 CR3=0000000028506000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=612d306466342d62 3065352d33613964
XMM06=306235346632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=ff000000ffffffff ffffffffffffffff XMM09=00303a3800000000 303a37622f623333
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900023eecb0
R8 =ffff8880210a0237 R9 =1ffff11004214046 R10=dffffc0000000000 R11=ffffffff854f24c0
R12=dffffc0000000000 R13=ffffffff99afa909 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f253c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff61ec2ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6ccce12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
